CVE-2008-5032 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-5032
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-5032

Description: Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/46375 SAID Secunia Advisory: SA33315 Secunia Advisory: SA32569 MLIST http://www.openwall.com/lists/oss-security/2008/11/05/4 http://www.openwall.com/lists/oss-security/2008/11/10/13 http://www.openwall.com/lists/oss-security/2008/11/05/5 MISC http://www.trapkit.de/advisories/TKADV2008-012.txt GENTOO http://security.gentoo.org/glsa/glsa-200812-24.xml CONFIRM http://www.videolan.org/security/sa0810.html http://git.videolan.org/?p=vlc.git;a=commitdiff;h=5f63f1562d43f32331006c2c1a61742de031b84d BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/498112/100/0/threaded BID 32125

Return to the previous page.