CVE-2008-5008: Buffer Overflow
Published Nov 10, 2008
·Updated
Buffer overflow in src/srcsinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file.
Affected Software
13 affected components
mega-nerd Secret Rabbit Code=0.0.2
mega-nerd Secret Rabbit Code=0.0.7
mega-nerd Secret Rabbit Code=0.1.0
mega-nerd Secret Rabbit Code=0.1.1
mega-nerd Secret Rabbit Code=0.0.9
mega-nerd Secret Rabbit Code=0.0.12
mega-nerd Secret Rabbit Code=0.0.15
mega-nerd Secret Rabbit Code<=0.1.3
mega-nerd Secret Rabbit Code=0.0.0
mega-nerd Secret Rabbit Code=0.0.13
mega-nerd Secret Rabbit Code=0.1.2
mega-nerd Secret Rabbit Code=0.0.14
mega-nerd Secret Rabbit Code=0.0.11
Event History
Nov 10, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5008?
CVE-2008-5008 is classified as a moderate severity vulnerability due to potential impact from crafted audio files.
2
How do I fix CVE-2008-5008?
To fix CVE-2008-5008, upgrade to Secret Rabbit Code version 0.1.4 or later.
3
What versions are affected by CVE-2008-5008?
CVE-2008-5008 affects Secret Rabbit Code versions up to 0.1.3.
4
What type of vulnerability is CVE-2008-5008?
CVE-2008-5008 is a buffer overflow vulnerability.
5
Can CVE-2008-5008 be exploited by remote attackers?
Yes, CVE-2008-5008 can potentially be exploited by user-assisted attackers through crafted audio files.