CVEvulnerability
CVE-2008-5276
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.
Affected configurations
• videolan vlc media player 0.9.0
• videolan vlc media player 0.9.1
• videolan vlc media player 0.9.2
• videolan vlc media player 0.9.3
• videolan vlc media player 0.9.4
• videolan vlc media player 0.9.5
• videolan vlc media player 0.9.6
• videolan vlc media player 0.9.7
• videolan vlc media player 0.9.8
Related
Weakness · not in database (1)
References
- http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07 git.videolan.org
- http://secunia.com/advisories/32942 Vendor Advisory
- http://secunia.com/advisories/33315 secunia.com
- http://security.gentoo.org/glsa/glsa-200812-24.xml security.gentoo.org
- http://securityreason.com/securityalert/4680 securityreason.com
- http://www.osvdb.org/50333 www.osvdb.org
- http://www.securityfocus.com/archive/1/498768/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32545 www.securityfocus.com
- http://www.trapkit.de/advisories/TKADV2008-013.txt Exploit
- http://www.videolan.org/security/sa0811.html Vendor Advisory
- http://www.vupen.com/english/advisories/2008/3287 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14793 oval.cisecurity.org
- http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07 git.videolan.org
- http://secunia.com/advisories/32942 Vendor Advisory
- http://secunia.com/advisories/33315 secunia.com
- http://security.gentoo.org/glsa/glsa-200812-24.xml security.gentoo.org
- http://securityreason.com/securityalert/4680 securityreason.com
- http://www.osvdb.org/50333 www.osvdb.org
- http://www.securityfocus.com/archive/1/498768/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32545 www.securityfocus.com
- http://www.trapkit.de/advisories/TKADV2008-013.txt Exploit
- http://www.videolan.org/security/sa0811.html Vendor Advisory
- http://www.vupen.com/english/advisories/2008/3287 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14793 oval.cisecurity.org