CVE-2007-6682 in VLC

Summary

Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 01/16/2008
• Disclosure: 01/16/2008
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-119 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.34376
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-6682
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-6682
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-6682/