CVE-2008-5032 Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modul...
HighCVSS 9.3
EPSS 10.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.5.0 | No fix listed |
| videolan vlc media player | = 0.5.3 | No fix listed |
| videolan vlc media player | = 0.6.0 | No fix listed |
| videolan vlc media player | = 0.6.2 | No fix listed |
| videolan vlc media player | = 0.7.0 | No fix listed |
| videolan vlc media player | = 0.7.1 | No fix listed |
| videolan vlc media player | = 0.7.1a | No fix listed |
| videolan vlc media player | = 0.7.2 | No fix listed |
| videolan vlc media player | = 0.7.2-test2 | No fix listed |
| videolan vlc media player | = 0.7.2-test3 | No fix listed |
| videolan vlc media player | = 0.8.0 | No fix listed |
| videolan vlc media player | = 0.8.1 | No fix listed |
| videolan vlc media player | = 0.8.2 | No fix listed |
| videolan vlc media player | = 0.8.4 | No fix listed |
| videolan vlc media player | = 0.8.4-test2 | No fix listed |
| videolan vlc media player | = 0.8.4a | No fix listed |
| videolan vlc media player | = 0.8.5 | No fix listed |
| videolan vlc media player | = 0.8.5-test3 | No fix listed |
| videolan vlc media player | = 0.8.5-test4 | No fix listed |
| videolan vlc media player | = 0.8.6 | No fix listed |
| videolan vlc media player | = 0.8.6a | No fix listed |
| videolan vlc media player | = 0.8.6b | No fix listed |
| videolan vlc media player | = 0.8.6c | No fix listed |
| videolan vlc media player | = 0.8.6d | No fix listed |
| videolan vlc media player | = 0.8.6e | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.8.6f | No fix listed |
| videolan vlc media player | = 0.8.6g | No fix listed |
| videolan vlc media player | = 0.8.6h | No fix listed |
| videolan vlc media player | = 0.8.6i | No fix listed |
| videolan vlc media player | = 0.9 | No fix listed |
| videolan vlc media player | = 0.9.0 | No fix listed |
| videolan vlc media player | = 0.9.1 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| videolan vlc media player | = 0.9.5 | No fix listed |
| debian/vlc(Debian:12) | < 0.8.6.h-5 | 0.8.6.h-5 |
| debian/vlc(Debian:13) | < 0.8.6.h-5 | 0.8.6.h-5 |
| debian/vlc(Debian:14) | < 0.8.6.h-5 | 0.8.6.h-5 |
References
- git.videolan.org
- 32569 third-party-advisory vendor-advisory
- 33315 third-party-advisory vendor-advisory
- GLSA-200812-24 vendor-advisory
- [oss-security] 20081105 VideoLAN security advisory 0810 mailing-list
- [oss-security] 20081105 CVE id request: vlc mailing-list
- [oss-security] 20081110 Re: CVE id request: vlc mailing-list
- 20081106 [TKADV2008-012] VLC media player cue Processing Stack Overflow Vulnerability mailing-list
- 32125 vdb-entry
- www.trapkit.de exploit
- www.videolan.org vendor-advisory
- vlcmediaplayer-cue-bo(46375) vdb-entry
- oval:org.mitre.oval:def:14798 signature vdb-entry
- Debian Security Tracker CVE-2008-5032 vendor-advisory
- bugs.debian.org issue-tracking