9.3
CVSSv2

CVE-2008-3732

Published: 20/08/2008 Updated: 29/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

videolan vlc media player 0.8.6i

Vendor Advisories

Debian Bug report logs - #496265 vlc: buffer overflow in mms handling Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Sun, 24 Aug 2008 00:21:01 UTC Severity: grave T ...

Exploits

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 086i Class : Heap overflow Published : 2008-08-16 Credit : g_ (g_ # orange-bat # com) - - Details - \modules\demux\ttac #define TTA_FRAMETIME 104489795918367346939 int i_seektable_size = 0, i; /* R ...