CVE-2008-5276 Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed R...
HighCVSS 9.3
EPSS 7.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.9.0 | No fix listed |
| videolan vlc media player | = 0.9.1 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| videolan vlc media player | = 0.9.5 | No fix listed |
| videolan vlc media player | = 0.9.6 | No fix listed |
| videolan vlc media player | = 0.9.7 | No fix listed |
| videolan vlc media player | = 0.9.8 | No fix listed |
| debian/vlc(Debian:12) | < 0.9.8a-1 | 0.9.8a-1 |
| debian/vlc(Debian:13) | < 0.9.8a-1 | 0.9.8a-1 |
| debian/vlc(Debian:14) | < 0.9.8a-1 | 0.9.8a-1 |
References
- git.videolan.org
- 32942 third-party-advisory vendor-advisory
- 33315 third-party-advisory
- GLSA-200812-24 vendor-advisory
- 4680 third-party-advisory
- 50333 vdb-entry
- 20081130 [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability mailing-list
- 32545 vdb-entry
- www.trapkit.de exploit
- www.videolan.org vendor-advisory
- ADV-2008-3287 vdb-entry
- oval:org.mitre.oval:def:14793 signature vdb-entry
- Debian Security Tracker CVE-2008-5276 vendor-advisory