Security Advisory

CVE-2008-1686

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-04-08 18:00:00

Last updated 2024-08-07 08:32:01

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

← Browse all CVEs View on cve.org ↗