Gentoo: GLSA-200804-17 Normal: Speex Code Execution Risk

Gentoo Linux Security Advisory GLSA 200804-17 https://security.gentoo.org/ Severity: Normal Title: Speex: User-assisted execution of arbitrary code Date: April 17, 2008 Bugs: #217715 ID: 200804-17

Synopsis ======= Improper input validation in Speex might lead to array indexing vulnerabilities in multiple player applications.
Background ========= Speex is an audio compression format designed for speech that is free of patent restrictions.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/speex < 1.2_beta3_p2 >= 1.2_beta3_p2
========== oCERT reported that the Speex library does not properly validate the "mode" value it derives from Speex streams, allowing for ...