Published: 26/08/2008 Updated: 29/09/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote malicious users to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
videolan vlc media player 0.8.6i

Debian Bug report logs - #496265 vlc: buffer overflow in mms handling Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Sun, 24 Aug 2008 00:21:01 UTC Severity: grave T ...

Several vulnerabilities have been discovered in vlc, a multimedia player and streamer The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1768 Drew Yao discovered that multiple integer overflows in the MP4 demuxer, Real demuxer and Cinepak codec can lead to the execution of arbitrary code CVE-2008-1769 Dr ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 086i MMS Protocol Handling Class : Heap Overflow Published : 2008-08-24 Credit : g_ (g_ # orange-bat # com) - - Details - This can be exploited from remote User have to open mmst:// link poiting to server controlled by the attacker vlc\mod ...

CWE-189 http://www.openwall.com/lists/oss-security/2008/08/24/3 http://mailman.videolan.org/pipermail/vlc-devel/2008-August/048488.html http://www.orange-bat.com/adv/2008/adv.08.24.txt http://www.securityfocus.com/bid/30806 http://security.gentoo.org/glsa/glsa-200809-06.xml http://www.securitytracker.com/id?1020759 http://securityreason.com/securityalert/4190 https://exchange.xforce.ibmcloud.com/vulnerabilities/44659 https://www.exploit-db.com/exploits/6293 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14531 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496265 https://nvd.nist.gov https://www.exploit-db.com/exploits/6293/https://www.debian.org/security/./dsa-1819

CVE-2008-3794

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect