CVE-2008-0295 in VLC Media Player
Summary
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/16/2008
Disclosure
01/16/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3544 | VideoLAN VLC Media Player SDP memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2008-0295 |