9.3 - CVE-2008-1686

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2008-1686	First vendor Publication	2008-04-08
Vendor	Cve	Last vendor Modification	2018-10-11

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1686

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10026

Oval ID:	oval:org.mitre.oval:def:10026
Title:	Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
Description:	Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1686	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section speex is earlier than 0:1.0.4-4.el4_6.1 AND speex-devel is earlier than 0:1.0.4-4.el4_6.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section speex is earlier than 0:1.0.5-4.el5_1.1 AND speex-devel is earlier than 0:1.0.5-4.el5_1.1

Definition Id: oval:org.mitre.oval:def:17457

Oval ID:	oval:org.mitre.oval:def:17457
Title:	USN-611-2 -- vorbis-tools vulnerability
Description:	USN-611-1 fixed a vulnerability in Speex.
Family:	unix	Class:	patch
Reference(s):	USN-611-2 CVE-2008-1686	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04	Product(s):	vorbis-tools
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND vorbis-tools DPKG is earlier than 1.1.1-3ubuntu0.1 AND Release section Ubuntu 7.04 is installed AND vorbis-tools DPKG is earlier than 1.1.1-6ubuntu0.1 AND Release section Ubuntu 7.10 is installed AND vorbis-tools DPKG is earlier than 1.1.1-13ubuntu0.1 AND Release section Ubuntu 8.04 is installed AND vorbis-tools DPKG is earlier than 1.1.1-15ubuntu0.1

Definition Id: oval:org.mitre.oval:def:17553

Oval ID:	oval:org.mitre.oval:def:17553
Title:	USN-611-1 -- speex vulnerability
Description:	It was discovered that Speex did not properly validate its input when processing Speex file headers.
Family:	unix	Class:	patch
Reference(s):	USN-611-1 CVE-2008-1686	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04	Product(s):	speex
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND libspeex1 DPKG is earlier than 1.1.11.1-1ubuntu0.3 AND Release section Ubuntu 7.04 is installed AND libspeex1 DPKG is earlier than 1.1.12-3ubuntu0.7.04.1 AND Release section Ubuntu 7.10 is installed AND libspeex1 DPKG is earlier than 1.1.12-3ubuntu0.7.10.1 AND Release section Ubuntu 8.04 is installed AND libspeex1 DPKG is earlier than 1.1.12-3ubuntu0.8.04.1

Definition Id: oval:org.mitre.oval:def:17732

Oval ID:	oval:org.mitre.oval:def:17732
Title:	USN-611-3 -- gst-plugins-good0.10 vulnerability
Description:	USN-611-1 fixed a vulnerability in Speex.
Family:	unix	Class:	patch
Reference(s):	USN-611-3 CVE-2008-1686	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04	Product(s):	gst-plugins-good0.10
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND gstreamer0.10-plugins-good DPKG is earlier than 0.10.3-0ubuntu4.1 AND Release section Ubuntu 7.04 is installed AND gstreamer0.10-plugins-good DPKG is earlier than 0.10.5-1ubuntu2.1 AND Release section Ubuntu 7.10 is installed AND gstreamer0.10-plugins-good DPKG is earlier than 0.10.6-0ubuntu4.1 AND Release section Ubuntu 8.04 is installed AND gstreamer0.10-plugins-good DPKG is earlier than 0.10.7-3ubuntu0.1

Definition Id: oval:org.mitre.oval:def:18615

Oval ID:	oval:org.mitre.oval:def:18615
Title:	DSA-1584-1 libfishsound - integer overflow
Description:	It was discovered that libfishsound, a simple programming interface that wraps Xiph.Org audio codecs, didn't correctly handle negative values in a particular header field. This could allow malicious files to execute arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1584-1 CVE-2008-1686	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	libfishsound
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND libfishsound DPKG is earlier than 0.7.0-2etch1

Definition Id: oval:org.mitre.oval:def:20293

Oval ID:	oval:org.mitre.oval:def:20293
Title:	DSA-1585-1 speex - integer overflow
Description:	It was discovered that speex, the Speex codec command line tools, did not correctly deal with negative offsets in a particular header field. This could allow a malicious file to execute arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1585-1 CVE-2008-1686	Version:	5
Platform(s):	Debian GNU/Linux 4.0	Product(s):	speex
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND speex DPKG is earlier than 0:1.1.12-3etch1

Definition Id: oval:org.mitre.oval:def:22410

Oval ID:	oval:org.mitre.oval:def:22410
Title:	ELSA-2008:0235: speex security update (Important)
Description:	Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0235-01 CVE-2008-1686	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	speex
Definition Synopsis:
Oracle Linux 5.x rpm test speex-devel is earlier than 0:1.0.5-4.el5_1.1 AND speex is earlier than 0:1.0.5-4.el5_1.1

Definition Id: oval:org.mitre.oval:def:7912

Oval ID:	oval:org.mitre.oval:def:7912
Title:	DSA-1585 speex -- integer overflow
Description:	It was discovered that speex, the Speex codec command line tools, did not correctly deal with negative offsets in a particular header field. This could allow a malicious file to execute arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1585 CVE-2008-1686	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	speex
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND speex-doc is earlier than 1.1.12-3etch1 OR Architecture dependent section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is alpha AND Installed architecture is mips AND Installed architecture is mipsel AND Installed architecture is arm AND Packages section speex is earlier than 1.1.12-3etch1 AND libspeex-dev is earlier than 1.1.12-3etch1 AND libspeex1 is earlier than 1.1.12-3etch1

Definition Id: oval:org.mitre.oval:def:8197

Oval ID:	oval:org.mitre.oval:def:8197
Title:	DSA-1584 libfishsound -- buffer overflow
Description:	It was discovered that libfishsound, a simple programming interface that wraps Xiph.Org audio codecs, didn't correctly handle negative values in a particular header field. This could allow malicious files to execute arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1584 CVE-2008-1686	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	libfishsound
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Packages section libfishsound1 is earlier than 0.7.0-2etch1 AND libfishsound1-dbg is earlier than 0.7.0-2etch1 AND libfishsound1-dev is earlier than 0.7.0-2etch1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Xine Xine-Lib cpe:2.3:a:xine:xine-lib:1.1.9.1:::::::* cpe:2.3:a:xine:xine-lib:1.1.9:::::::* cpe:2.3:a:xine:xine-lib:1.1.8:::::::* cpe:2.3:a:xine:xine-lib:1.1.7:::::::* cpe:2.3:a:xine:xine-lib:1.1.6:::::::* cpe:2.3:a:xine:xine-lib:1.1.5:::::::* cpe:2.3:a:xine:xine-lib:1.1.4:::::::* cpe:2.3:a:xine:xine-lib:1.1.3:::::::* cpe:2.3:a:xine:xine-lib:1.1.2:::::::* cpe:2.3:a:xine:xine-lib:1.1.11.1:::::::* cpe:2.3:a:xine:xine-lib:1.1.11:::::::* cpe:2.3:a:xine:xine-lib:1.1.10.1:::::::* cpe:2.3:a:xine:xine-lib:1.1.10:::::::* cpe:2.3:a:xine:xine-lib:1.1.1:::::::* cpe:2.3:a:xine:xine-lib:1.1.0:::::::* cpe:2.3:a:xine:xine-lib:1.0.3a:::::::* cpe:2.3:a:xine:xine-lib:1.0.2:::::::* cpe:2.3:a:xine:xine-lib:1.0.1:::::::* cpe:2.3:a:xine:xine-lib:1.0:::::::* cpe:2.3:a:xine:xine-lib:1_rc7:::::::* cpe:2.3:a:xine:xine-lib:1_rc6a:::::::* cpe:2.3:a:xine:xine-lib:1_rc6:::::::* cpe:2.3:a:xine:xine-lib:1_rc5_r2:::::::* cpe:2.3:a:xine:xine-lib:1_rc5:::::::* cpe:2.3:a:xine:xine-lib:1_rc4:::::::* cpe:2.3:a:xine:xine-lib:1_rc3c:::::::* cpe:2.3:a:xine:xine-lib:1_rc3b:::::::* cpe:2.3:a:xine:xine-lib:1_rc3a:::::::* cpe:2.3:a:xine:xine-lib:1_rc3:::::::* cpe:2.3:a:xine:xine-lib:1_rc2:::::::* cpe:2.3:a:xine:xine-lib:1_rc1:::::::* cpe:2.3:a:xine:xine-lib:1_rc0:::::::* cpe:2.3:a:xine:xine-lib:1_beta9:::::::* cpe:2.3:a:xine:xine-lib:1_beta8:::::::* cpe:2.3:a:xine:xine-lib:1_beta7:::::::* cpe:2.3:a:xine:xine-lib:1_beta6:::::::* cpe:2.3:a:xine:xine-lib:1_beta5:::::::* cpe:2.3:a:xine:xine-lib:1_beta4:::::::* cpe:2.3:a:xine:xine-lib:1_beta3:::::::* cpe:2.3:a:xine:xine-lib:1_beta2:::::::* cpe:2.3:a:xine:xine-lib:1_beta12:::::::* cpe:2.3:a:xine:xine-lib:1_beta11:::::::* cpe:2.3:a:xine:xine-lib:1_beta10:::::::* cpe:2.3:a:xine:xine-lib:1_beta1:::::::* cpe:2.3:a:xine:xine-lib:1_alpha:::::::* cpe:2.3:a:xine:xine-lib:1:rc5:::::: cpe:2.3:a:xine:xine-lib:1:rc4a:::::: cpe:2.3:a:xine:xine-lib:1:rc3:::::: cpe:2.3:a:xine:xine-lib:1:rc1:::::: cpe:2.3:a:xine:xine-lib:1:rc0a:::::: cpe:2.3:a:xine:xine-lib:1:rc4:::::: cpe:2.3:a:xine:xine-lib:1:rc7:::::: cpe:2.3:a:xine:xine-lib:1:rc6a:::::: cpe:2.3:a:xine:xine-lib:1:rc3b:::::: cpe:2.3:a:xine:xine-lib:1:rc3a:::::: cpe:2.3:a:xine:xine-lib:1:rc2:::::: cpe:2.3:a:xine:xine-lib:1:rc3c:::::: cpe:2.3:a:xine:xine-lib:1:rc8:::::: cpe:2.3:a:xine:xine-lib:0.99:::::::* cpe:2.3:a:xine:xine-lib:0.9.8:::::::* cpe:2.3:a:xine:xine-lib:0.9.13:::::::*	61

OpenVAS Exploits

Date	Description
2009-04-09	Name : Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 (gstreamer-plugins... File : nvt/gb_mandriva_MDVSA_2008_092.nasl
2009-04-09	Name : Mandriva Update for vorbis-tools MDVSA-2008:093 (vorbis-tools) File : nvt/gb_mandriva_MDVSA_2008_093.nasl
2009-04-09	Name : Mandriva Update for speex MDVSA-2008:094 (speex) File : nvt/gb_mandriva_MDVSA_2008_094.nasl
2009-04-09	Name : Mandriva Update for xine-lib MDVSA-2008:124 (xine-lib) File : nvt/gb_mandriva_MDVSA_2008_124.nasl
2009-03-23	Name : Ubuntu Update for xine-lib vulnerabilities USN-635-1 File : nvt/gb_ubuntu_USN_635_1.nasl
2009-03-23	Name : Ubuntu Update for gst-plugins-good0.10 vulnerability USN-611-3 File : nvt/gb_ubuntu_USN_611_3.nasl
2009-03-23	Name : Ubuntu Update for vorbis-tools vulnerability USN-611-2 File : nvt/gb_ubuntu_USN_611_2.nasl
2009-03-23	Name : Ubuntu Update for speex vulnerability USN-611-1 File : nvt/gb_ubuntu_USN_611_1.nasl
2009-03-06	Name : RedHat Update for speex RHSA-2008:0235-01 File : nvt/gb_RHSA-2008_0235-01_speex.nasl
2009-02-27	Name : CentOS Update for speex CESA-2008:0235 centos4 i386 File : nvt/gb_CESA-2008_0235_speex_centos4_i386.nasl
2009-02-27	Name : CentOS Update for speex CESA-2008:0235 centos4 x86_64 File : nvt/gb_CESA-2008_0235_speex_centos4_x86_64.nasl
2009-02-17	Name : Fedora Update for libfishsound FEDORA-2008-3059 File : nvt/gb_fedora_2008_3059_libfishsound_fc8.nasl
2009-02-17	Name : Fedora Update for speex FEDORA-2008-3103 File : nvt/gb_fedora_2008_3103_speex_fc8.nasl
2009-02-17	Name : Fedora Update for libfishsound FEDORA-2008-3117 File : nvt/gb_fedora_2008_3117_libfishsound_fc7.nasl
2009-02-17	Name : Fedora Update for speex FEDORA-2008-3191 File : nvt/gb_fedora_2008_3191_speex_fc7.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-17 (speex) File : nvt/glsa_200804_17.nasl
2008-09-04	Name : FreeBSD Ports: vorbis-tools File : nvt/freebsd_vorbis-tools.nasl
2008-09-04	Name : FreeBSD Ports: libxine File : nvt/freebsd_libxine9.nasl
2008-05-27	Name : Debian Security Advisory DSA 1586-1 (xine-lib) File : nvt/deb_1586_1.nasl
2008-05-27	Name : Debian Security Advisory DSA 1584-1 (libfishsound) File : nvt/deb_1584_1.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-111-01 xine-lib File : nvt/esoft_slk_ssa_2008_111_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
44143	libfishsound Speex Decoder Header Structure Handling Arbitrary Code Execution

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0235.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080416_speex_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xine-devel-5304.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_vorbis-tools-5302.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-124.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-094.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing a security update. File : mandriva_MDVSA-2008-093.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-092.nasl - Type : ACT_GATHER_INFO
2008-08-20	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-635-1.nasl - Type : ACT_GATHER_INFO
2008-07-08	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_speex-5364.nasl - Type : ACT_GATHER_INFO
2008-06-12	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_gstreamer010-plugins-good-5185.nasl - Type : ACT_GATHER_INFO
2008-06-12	Name : The remote openSUSE host is missing a security update. File : suse_gstreamer010-plugins-good-5195.nasl - Type : ACT_GATHER_INFO
2008-06-04	Name : The remote openSUSE host is missing a security update. File : suse_vorbis-tools-5192.nasl - Type : ACT_GATHER_INFO
2008-06-04	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_vorbis-tools-5193.nasl - Type : ACT_GATHER_INFO
2008-05-23	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1586.nasl - Type : ACT_GATHER_INFO
2008-05-22	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1585.nasl - Type : ACT_GATHER_INFO
2008-05-22	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1584.nasl - Type : ACT_GATHER_INFO
2008-05-20	Name : The remote Fedora host is missing a security update. File : fedora_2008-3117.nasl - Type : ACT_GATHER_INFO
2008-05-20	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_xine-devel-5205.nasl - Type : ACT_GATHER_INFO
2008-05-20	Name : The remote openSUSE host is missing a security update. File : suse_xine-devel-5204.nasl - Type : ACT_GATHER_INFO
2008-05-13	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_633716fa1f8f11ddb1430211d880e350.nasl - Type : ACT_GATHER_INFO
2008-05-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-611-3.nasl - Type : ACT_GATHER_INFO
2008-05-09	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-611-2.nasl - Type : ACT_GATHER_INFO
2008-05-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-611-1.nasl - Type : ACT_GATHER_INFO
2008-04-28	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_7a7c585310a311dd8eb800163e000016.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-111-01.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0235.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200804-17.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0235.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Fedora host is missing a security update. File : fedora_2008-3059.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Fedora host is missing a security update. File : fedora_2008-3103.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Fedora host is missing a security update. File : fedora_2008-3191.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/28665
BUGTRAQ	http://www.securityfocus.com/archive/1/491009/100/0/threaded
CONFIRM	http://blog.kfish.org/2008/04/release-libfishsound-091.html http://sourceforge.net/project/shownotes.php?release_id=592185 http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655 http://www.metadecks.org/software/sweep/news.html
DEBIAN	http://www.debian.org/security/2008/dsa-1584 http://www.debian.org/security/2008/dsa-1585 http://www.debian.org/security/2008/dsa-1586
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00244.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00287.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00357.html
GENTOO	http://security.gentoo.org/glsa/glsa-200804-17.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2008:092 http://www.mandriva.com/security/advisories?name=MDVSA-2008:093 http://www.mandriva.com/security/advisories?name=MDVSA-2008:094 http://www.mandriva.com/security/advisories?name=MDVSA-2008:124
MISC	http://www.ocert.org/advisories/ocert-2008-004.html http://www.ocert.org/advisories/ocert-2008-2.html
MLIST	http://lists.xiph.org/pipermail/speex-dev/2008-April/006636.html
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2008-0235.html
SECTRACK	http://www.securitytracker.com/id?1019875
SECUNIA	http://secunia.com/advisories/29672 http://secunia.com/advisories/29727 http://secunia.com/advisories/29835 http://secunia.com/advisories/29845 http://secunia.com/advisories/29854 http://secunia.com/advisories/29866 http://secunia.com/advisories/29878 http://secunia.com/advisories/29880 http://secunia.com/advisories/29881 http://secunia.com/advisories/29882 http://secunia.com/advisories/29898 http://secunia.com/advisories/30104 http://secunia.com/advisories/30117 http://secunia.com/advisories/30119 http://secunia.com/advisories/30337 http://secunia.com/advisories/30353 http://secunia.com/advisories/30358 http://secunia.com/advisories/30581 http://secunia.com/advisories/30717 http://secunia.com/advisories/31393
SLACKWARE	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&...
SUSE	http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html http://www.novell.com/linux/security/advisories/2008_13_sr.html
UBUNTU	http://www.ubuntu.com/usn/usn-611-1 http://www.ubuntu.com/usn/usn-611-2 http://www.ubuntu.com/usn/usn-611-3 http://www.ubuntu.com/usn/usn-635-1
VUPEN	http://www.vupen.com/english/advisories/2008/1187/references http://www.vupen.com/english/advisories/2008/1228/references http://www.vupen.com/english/advisories/2008/1268/references http://www.vupen.com/english/advisories/2008/1269/references http://www.vupen.com/english/advisories/2008/1300/references http://www.vupen.com/english/advisories/2008/1301/references http://www.vupen.com/english/advisories/2008/1302/references
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/41684

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-05 01:04:39	Multiple Updates
2021-05-04 12:07:23	Multiple Updates
2021-04-22 01:07:47	Multiple Updates
2020-05-23 01:39:20	Multiple Updates
2020-05-23 00:21:32	Multiple Updates
2018-10-12 00:20:18	Multiple Updates
2017-09-29 09:23:30	Multiple Updates
2017-08-08 09:24:00	Multiple Updates
2016-04-26 17:17:37	Multiple Updates
2014-02-17 10:44:35	Multiple Updates
2013-05-11 00:14:35	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	9
CPE ID(s)	61
Sources(s)	58
osvdb(s)	1
Openvas Exploit(s)	21
Nessus® Exploit(s)	32

	Related
9.3	USN-635-1
9.3	USN-611-3
9.3	USN-611-2
9.3	USN-611-1
9.3	RHSA-2008:0235
9.3	MDVSA-2008:124
9.3	MDVSA-2008:094
9.3	MDVSA-2008:093
9.3	MDVSA-2008:092
9.3	GLSA-200804-17
9.3	DSA-1586
9.3	DSA-1585
9.3	DSA-1584
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 13 more Alert(s)