PT-2008-6176 · Libsamplerate · Secret Rabbit Code

Publicado 2008-11-10 · Atualizado 2017-08-08 · CVE-2008-5008

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Secret Rabbit Code (aka SRC or libsamplerate) versions prior to 0.1.4

Description The issue is related to a buffer overflow in the src/src sinc.c file of the Secret Rabbit Code, which can be triggered when extreme low conversion ratios are used. This can be exploited by user-assisted attackers via a crafted audio file, although the exact impact is not specified.

Recommendations For versions prior to 0.1.4, update to version 0.1.4 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-5008

OPENSUSE-SU-2024:10987-1

Produtos afetados

Secret Rabbit Code

Referências · 10

• https://osv.dev/vulnerability/DEBIAN-CVE-2008-5008 · Aviso do Fabricante
• http://securityfocus.com/bid/32090 · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-5008 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2008:238 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200812-05.xml · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2008/11/03/6 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46542 · Nota
• http://mega-nerd.com/SRC/ChangeLog · Nota
• https://osv.dev/vulnerability/CVE-2008-5008 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5008 · Nota de Segurança