CVE-2008-1769 VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
MediumCVSS 6.8
EPSS 7.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc | = 0.1.99 | No fix listed |
| videolan vlc | = 0.1.99a | No fix listed |
| videolan vlc | = 0.1.99b | No fix listed |
| videolan vlc | = 0.1.99c | No fix listed |
| videolan vlc | = 0.1.99d | No fix listed |
| videolan vlc | = 0.1.99e | No fix listed |
| videolan vlc | = 0.1.99f | No fix listed |
| videolan vlc | = 0.1.99g | No fix listed |
| videolan vlc | = 0.1.99h | No fix listed |
| videolan vlc | = 0.1.99i | No fix listed |
| videolan vlc | = 0.2.0 | No fix listed |
| videolan vlc | = 0.2.50 | No fix listed |
| videolan vlc | = 0.2.60 | No fix listed |
| videolan vlc | = 0.2.61 | No fix listed |
| videolan vlc | = 0.2.62 | No fix listed |
| videolan vlc | = 0.2.63 | No fix listed |
| videolan vlc | = 0.2.70 | No fix listed |
| videolan vlc | = 0.2.71 | No fix listed |
| videolan vlc | = 0.2.72 | No fix listed |
| videolan vlc | = 0.2.73 | No fix listed |
| videolan vlc | = 0.2.80 | No fix listed |
| videolan vlc | = 0.2.81 | No fix listed |
| videolan vlc | = 0.2.82 | No fix listed |
| videolan vlc | = 0.2.83 | No fix listed |
| videolan vlc | = 0.2.90 | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc | = 0.2.91 | No fix listed |
| videolan vlc | = 0.2.92 | No fix listed |
| videolan vlc | = 0.3.0 | No fix listed |
| videolan vlc | = 0.3.1 | No fix listed |
| videolan vlc | = 0.4.0 | No fix listed |
| videolan vlc | = 0.4.1 | No fix listed |
| videolan vlc | = 0.4.2 | No fix listed |
| videolan vlc | = 0.4.3 | No fix listed |
| videolan vlc | = 0.4.3_ac3 | No fix listed |
| videolan vlc | = 0.4.4 | No fix listed |
| videolan vlc | = 0.4.5 | No fix listed |
| videolan vlc | = 0.4.6 | No fix listed |
| videolan vlc | = 0.5.0 | No fix listed |
| videolan vlc | = 0.5.1 | No fix listed |
| videolan vlc | = 0.5.2 | No fix listed |
| videolan vlc | = 0.5.3 | No fix listed |
| videolan vlc | = 0.6.0 | No fix listed |
| videolan vlc | = 0.6.1 | No fix listed |
| videolan vlc | = 0.6.2 | No fix listed |
| videolan vlc | = 0.7.0 | No fix listed |
| videolan vlc | = 0.7.1 | No fix listed |
| videolan vlc | = 0.7.2 | No fix listed |
| videolan vlc | = 0.8.0 | No fix listed |
| videolan vlc | = 0.8.1 | No fix listed |
| videolan vlc | = 0.8.2 | No fix listed |
| videolan vlc | = 0.8.4 | No fix listed |
| videolan vlc | = 0.8.4a | No fix listed |
| videolan vlc | = 0.8.5 | No fix listed |
| videolan vlc | = 0.8.6 | No fix listed |
| videolan vlc | = 0.8.6a | No fix listed |
| videolan vlc | = 0.8.6b | No fix listed |
| videolan vlc | = 0.8.6c | No fix listed |
| videolan vlc | = 0.8.6d | No fix listed |
| videolan vlc | = 0.8.6e | No fix listed |
| videolan vlc | = 0.8.1337 | No fix listed |
| debian/vlc(Debian:12) | < 0.8.6.e-2.1 | 0.8.6.e-2.1 |
| debian/vlc(Debian:13) | < 0.8.6.e-2.1 | 0.8.6.e-2.1 |
| debian/vlc(Debian:14) | < 0.8.6.e-2.1 | 0.8.6.e-2.1 |
References
- bugs.gentoo.org
- git.videolan.org
- 29503 third-party-advisory
- 29800 third-party-advisory
- GLSA-200804-25 vendor-advisory
- wiki.videolan.org
- 28904 vdb-entry
- www.videolan.org
- www.videolan.org
- ADV-2008-0985 vdb-entry
- oval:org.mitre.oval:def:14445 signature vdb-entry
- Debian Security Tracker CVE-2008-1769 vendor-advisory
- bugs.debian.org issue-tracking