FreeBSD : vorbis-tools -- Speex header processing vulnerability (633716fa-1f8f-11dd-b143-0211d880e350)

NASLDB: FreeBSD : vorbis-tools -- Speex header processing vulnerability (633716fa-1f8f-11dd-b143-0211d880e350)

General

ID: 32299
Name: FreeBSD : vorbis-tools — Speex header processing vulnerability (633716fa-1f8f-11dd-b143-0211d880e350)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: –

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

Secunia reports :

A vulnerability has been reported in vorbis-tools, which can
potentially be exploited by malicious people to compromise a user’s
system.

The vulnerability is caused due to an input validation error when
processing Speex headers, which can be exploited via a specially
crafted Speex stream containing a negative ‘modeID’ field in the
header.

Successful exploitation may allow execution of arbitrary code.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2008-1686
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2008/04/18
Patch Release: 2008/05/11
Plugin Release: 2008/05/13

Plugin

Version: 1.11
Filename: freebsd_pkg_633716fa1f8f11ddb1430211d880e350.nasl
Filesize: 4421 bytes
MD5 Hash: e73a2e545ba826504c1ffdef78c7a48b

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"