Published: 17/04/2008 Updated: 29/09/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 690

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote malicious users to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681.

Vulnerable Product	Search on Vulmon	Subscribe to Product
videolan vlc 0.8.6e

Debian Bug report logs - #489004 vlc: CVE-2008-2430 heap overflow in wav fmt chunk parsing Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Wed, 2 Jul 2008 17:21:07 U ...

Debian Bug report logs - #478140 vlc: CVE-2008-1768, CVE-2008-1769 multiple security issues Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Sun, 27 Apr 2008 13:45:02 ...

Debian Bug report logs - #477805 vlc: CVE-2008-1881 stack-based buffer overflow in subtitle parsing Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Fri, 25 Apr 2008 1 ...

Several vulnerabilities have been discovered in vlc, a multimedia player and streamer The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1768 Drew Yao discovered that multiple integer overflows in the MP4 demuxer, Real demuxer and Cinepak codec can lead to the execution of arbitrary code CVE-2008-1769 Dr ...

/* VLC <=086e Subtitle parsing local buffer overflow exploit Creadit to cuongmx@gmailcom vs Look2Me @ Tested on windows XP Pro SP2 */ #include <stdioh> #include <stdlibh> #include <stringh> char ssa_header[]= "[Script Info]\r\n" "Title: VLC <= 086c,e buffer-overflow\r\n" "ScriptType: v400\r\n" "Collisions: Norma ...

#!/usr/bin/python # # VLC 086d Double Sh311 Universal Exploit # CVE-2007-6681 # Vulnerability Discovered by Michal Luczaj # # Coded by Muris Kurgas aka j0rgan wwwjorganuserscgyu/ # and # Matteo Memelli aka ryujin wwwbe4mindcom - wwwgray-worldnet # WE CODED IT JUST FOR FUN ;) # Cheers to #offsec and all our firends :) ...

CWE-119 http://www.securityfocus.com/archive/1/489698 http://aluigi.org/adv/vlcboffs-adv.txt http://wiki.videolan.org/Changelog/0.8.6f http://security.gentoo.org/glsa/glsa-200804-25.xml http://www.securityfocus.com/bid/28274 http://secunia.com/advisories/29800 http://secunia.com/advisories/28233 http://aluigi.altervista.org/adv/vlcboffs-adv.txt http://www.securityfocus.com/bid/28251 https://exchange.xforce.ibmcloud.com/vulnerabilities/41936 https://exchange.xforce.ibmcloud.com/vulnerabilities/41237 https://www.exploit-db.com/exploits/5250 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14872 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489004 https://www.exploit-db.com/exploits/5250/https://www.debian.org/security/./dsa-1819

CVE-2008-1881

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect