CVE-2008-0295 in VLC Media Player

Sumário (Inglês)

Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

16/01/2008

Divulgação

16/01/2008

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
3544	VideoLAN VLC Media Player SDP Excesso de tampão	119	Prova de conceito	Correção oficial	CVE-2008-0295

Fontes

• MITRE
• NVD
• CVE Details