CVE-2008-3732 Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via....
HighCVSS 9.3
EPSS 13.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.8.6i | No fix listed |
| debian/vlc(Debian:12) | < 0.8.6.h-2 | 0.8.6.h-2 |
| debian/vlc(Debian:13) | < 0.8.6.h-2 | 0.8.6.h-2 |
| debian/vlc(Debian:14) | < 0.8.6.h-2 | 0.8.6.h-2 |
References
- Debian Security Tracker CVE-2008-3732 vendor-advisory
- 31512 third-party-advisory vendor-advisory
- GLSA-200809-06 vendor-advisory
- 4170 third-party-advisory
- www.orange-bat.com exploit
- 30718 vdb-entry
- ADV-2008-2394 vdb-entry
- vlc-mediaplayer-open-bo(44510) vdb-entry
- oval:org.mitre.oval:def:14570 signature vdb-entry
- 6252 exploit