CVE-2008-5008

Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/11/03/6
http://www.mega-nerd.com/SRC/ChangeLog
http://security.gentoo.org/glsa/glsa-200812-05.xml
http://www.securityfocus.com/bid/32090
http://www.mandriva.com/security/advisories?name=MDVSA-2008:238
https://exchange.xforce.ibmcloud.com/vulnerabilities/46542

Configuration 1

cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.2:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.7:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.0:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.1:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.9:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.12:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.15:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:*:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.0:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.13:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.2:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.14:*:*:*:*:*:*:* cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.11:*:*:*:*:*:*:*

---

Published : 2008-11-10 02:12

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5008

Mitre link : CVE-2008-5008

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer