Vulnerability Details CVE-2008-5008
Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.5%
CVSS Severity
CVSS v2 Score 9.3
References
- http://security.gentoo.org/glsa/glsa-200812-05.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:238
- http://www.mega-nerd.com/SRC/ChangeLog
- http://www.openwall.com/lists/oss-security/2008/11/03/6
- http://www.securityfocus.com/bid/32090
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46542
- http://security.gentoo.org/glsa/glsa-200812-05.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:238
- http://www.mega-nerd.com/SRC/ChangeLog
- http://www.openwall.com/lists/oss-security/2008/11/03/6
- http://www.securityfocus.com/bid/32090
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46542
Products affected by CVE-2008-5008
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:*
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.0
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.11
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.12
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.13
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.14
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.15
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.2
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.7
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.0.9
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.0
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.1
-
cpe:2.3:a:mega-nerd:secret_rabbit_code:0.1.2