CVE-2008-5008: Buffer Overflow
First published: Mon Nov 10 2008(Updated: )
Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mega-nerd Secret Rabbit Code | =0.0.2 | |
| Mega-nerd Secret Rabbit Code | =0.0.7 | |
| Mega-nerd Secret Rabbit Code | =0.1.0 | |
| Mega-nerd Secret Rabbit Code | =0.1.1 | |
| Mega-nerd Secret Rabbit Code | =0.0.9 | |
| Mega-nerd Secret Rabbit Code | =0.0.12 | |
| Mega-nerd Secret Rabbit Code | =0.0.15 | |
| Mega-nerd Secret Rabbit Code | <=0.1.3 | |
| Mega-nerd Secret Rabbit Code | =0.0.0 | |
| Mega-nerd Secret Rabbit Code | =0.0.13 | |
| Mega-nerd Secret Rabbit Code | =0.1.2 | |
| Mega-nerd Secret Rabbit Code | =0.0.14 | |
| Mega-nerd Secret Rabbit Code | =0.0.11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2008/11/03/6
- http://www.mega-nerd.com/SRC/ChangeLog
- http://security.gentoo.org/glsa/glsa-200812-05.xml
- http://www.securityfocus.com/bid/32090
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:238
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46542
Frequently Asked Questions
What is the severity of CVE-2008-5008?
CVE-2008-5008 is classified as a moderate severity vulnerability due to potential impact from crafted audio files.
How do I fix CVE-2008-5008?
To fix CVE-2008-5008, upgrade to Secret Rabbit Code version 0.1.4 or later.
What versions are affected by CVE-2008-5008?
CVE-2008-5008 affects Secret Rabbit Code versions up to 0.1.3.
What type of vulnerability is CVE-2008-5008?
CVE-2008-5008 is a buffer overflow vulnerability.
Can CVE-2008-5008 be exploited by remote attackers?
Yes, CVE-2008-5008 can potentially be exploited by user-assisted attackers through crafted audio files.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/tags
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- vendor/mega-nerd
- canonical/mega-nerd secret rabbit code
- version/mega-nerd secret rabbit code/0.0.2
- version/mega-nerd secret rabbit code/0.0.7
- version/mega-nerd secret rabbit code/0.1.0
- version/mega-nerd secret rabbit code/0.1.1
- version/mega-nerd secret rabbit code/0.0.9
- version/mega-nerd secret rabbit code/0.0.12
- version/mega-nerd secret rabbit code/0.0.15
- version/mega-nerd secret rabbit code/0.1.3
- version/mega-nerd secret rabbit code/0.0.0
- version/mega-nerd secret rabbit code/0.0.13
- version/mega-nerd secret rabbit code/0.1.2
- version/mega-nerd secret rabbit code/0.0.14
- version/mega-nerd secret rabbit code/0.0.11