Deskripsi CVE

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-189	Category : Numeric Errors Weaknesses in this category are related to improper calculation or conversion of numbers.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	9.3		AV:N/AC:M/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Xine>>Xine-lib >> Version Hingga (termasuk) 1.1.11.1

Xine>>Xine-lib >> Version 0.9.8

Xine>>Xine-lib >> Version 0.9.13

Xine>>Xine-lib >> Version 0.99

Xine>>Xine-lib >> Version 1.0

Xine>>Xine-lib >> Version 1.0.1

Xine>>Xine-lib >> Version 1.0.2

Xine>>Xine-lib >> Version 1.0.3a

Xine>>Xine-lib >> Version 1.1.0

Xine>>Xine-lib >> Version 1.1.1

Xine>>Xine-lib >> Version 1.1.10

Xine>>Xine-lib >> Version 1.1.10.1

Xine>>Xine-lib >> Version 1.1.11

Konfigurasi 0

Xiph>>Speex >> Version Hingga (termasuk) 1.1.12

Xiph>>Speex >> Version 1.0.2

Xiph>>Speex >> Version 1.0.3

Xiph>>Speex >> Version 1.0.4

Xiph>>Speex >> Version 1.0.5

Xiph>>Speex >> Version 1.1.1

Xiph>>Speex >> Version 1.1.2

Xiph>>Speex >> Version 1.1.3

Xiph>>Speex >> Version 1.1.4

Xiph>>Speex >> Version 1.1.5

Xiph>>Speex >> Version 1.1.6

Xiph>>Speex >> Version 1.1.7

Xiph>>Speex >> Version 1.1.8

Xiph>>Speex >> Version 1.1.9

Xiph>>Speex >> Version 1.1.10

Xiph>>Speex >> Version 1.1.11

Xiph>>Speex >> Version 1.1.11.1

Xiph>>Libfishsound >> Version Hingga (termasuk) 0.9.0

Xiph>>Libfishsound >> Version 0.5.41

Xiph>>Libfishsound >> Version 0.5.42

Xiph>>Libfishsound >> Version 0.6.0

Xiph>>Libfishsound >> Version 0.6.1

Xiph>>Libfishsound >> Version 0.6.2

Xiph>>Libfishsound >> Version 0.6.3

Xiph>>Libfishsound >> Version 0.7.0

Xiph>>Libfishsound >> Version 0.8.0

Xiph>>Libfishsound >> Version 0.8.1

Referensi

http://www.ubuntu.com/usn/usn-611-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://sourceforge.net/project/shownotes.php?release_id=592185
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/491009/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.vupen.com/english/advisories/2008/1302/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.mandriva.com/security/advisories?name=MDVSA-2008:124
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.securitytracker.com/id?1019875
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/29878
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/29898
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00287.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2008/1269/references
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/29866
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2008/dsa-1586
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/30117
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.xiph.org/pipermail/speex-dev/2008-April/006636.html
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/30104
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2008/1300/references
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/29727
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2008/1301/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.ubuntu.com/usn/usn-611-3
Tags : vendor-advisory, x_refsource_UBUNTU

http://secunia.com/advisories/29672
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.debian.org/security/2008/dsa-1585
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.mandriva.com/security/advisories?name=MDVSA-2008:092
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/30353
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/41684
Tags : vdb-entry, x_refsource_XF

http://secunia.com/advisories/29835
Tags : third-party-advisory, x_refsource_SECUNIA

http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/29880
Tags : third-party-advisory, x_refsource_SECUNIA

http://blog.kfish.org/2008/04/release-libfishsound-091.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/31393
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10026
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.ocert.org/advisories/ocert-2008-2.html
Tags : x_refsource_MISC

http://www.vupen.com/english/advisories/2008/1228/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.debian.org/security/2008/dsa-1584
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.ocert.org/advisories/ocert-2008-004.html
Tags : x_refsource_MISC

http://www.vupen.com/english/advisories/2008/1268/references
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/29845
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-611-2
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.redhat.com/support/errata/RHSA-2008-0235.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/30358
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/29854
Tags : third-party-advisory, x_refsource_SECUNIA

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.460836
Tags : vendor-advisory, x_refsource_SLACKWARE

http://www.vupen.com/english/advisories/2008/1187/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.mandriva.com/security/advisories?name=MDVSA-2008:094
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/29881
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDVSA-2008:093
Tags : vendor-advisory, x_refsource_MANDRIVA

http://security.gentoo.org/glsa/glsa-200804-17.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/30119
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/28665
Tags : vdb-entry, x_refsource_BID

http://www.metadecks.org/software/sweep/news.html
Tags : x_refsource_CONFIRM

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00357.html
Tags : vendor-advisory, x_refsource_FEDORA

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00244.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/29882
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-635-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://secunia.com/advisories/30337
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30581
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.novell.com/linux/security/advisories/2008_13_sr.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/30717
Tags : third-party-advisory, x_refsource_SECUNIA

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	9.92%	–	–
2022-04-03	–	–	9.92%	–	–
2023-02-26	–	–	9.92%	–	–
2023-03-12	–	–	–	6.57%	–
2024-02-18	–	–	–	6.57%	–
2024-04-14	–	–	–	6.76%	–
2024-06-02	–	–	–	6.76%	–
2024-09-15	–	–	–	11.22%	–
2024-12-08	–	–	–	11.58%	–
2024-12-15	–	–	–	11.58%	–
2024-12-22	–	–	–	14.4%	–
2025-01-05	–	–	–	18.32%	–
2025-01-19	–	–	–	18.32%	–
2025-02-16	–	–	–	16.49%	–
2025-02-16	–	–	–	16.49%	–
2025-03-18	–	–	–	–	5.13%
2025-03-30	–	–	–	–	6.07%
2025-06-15	–	–	–	–	5.25%
2025-06-21	–	–	–	–	5.25%
2025-06-23	–	–	–	–	5.25%
2025-06-27	–	–	–	–	5.25%
2025-10-08	–	–	–	–	5.25%
2025-10-27	–	–	–	–	5.71%
2025-11-18	–	–	–	–	5.71%
2025-11-21	–	–	–	–	5.71%
2025-12-01	–	–	–	–	5.95%
2025-12-02	–	–	–	–	5.25%
2026-05-10	–	–	–	–	5.94%

Tanggal	Persentil
2022-02-06	88%
2022-04-03	94%
2023-02-26	95%
2023-03-12	93%
2024-02-18	94%
2024-04-14	94%
2024-06-02	94%
2024-09-15	95%
2024-12-08	95%
2024-12-15	96%
2024-12-22	96%
2025-01-05	96%
2025-01-19	96%
2025-02-16	96%
2025-02-16	96%
2025-03-18	89%
2025-03-30	9%
2025-06-15	89%
2025-06-21	9%
2025-06-23	89%
2025-06-27	9%
2025-10-08	89%
2025-10-27	9%
2025-11-18	89%
2025-11-21	9%
2025-12-01	9%
2025-12-02	9%
2026-05-10	91%

CVE-2008-1686 : Detail

CVE-2008-1686

Deskripsi CVE

Informasi CVE

Kelemahan Terkait

Metrik

EPSS

Skor EPSS

Persentil EPSS

Produk yang Disebutkan

Konfigurasi 0

Konfigurasi 0

Referensi