Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-3794
HistoryAug 26, 2008 - 3:41 p.m.

CVE-2008-3794

2008-08-2615:41:00
CWE-189
mitre
web.nvd.nist.gov
38
security
vulnerability
vlc media player
remote code execution
integer overflow
heap-based buffer overflow

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.152

Percentile

95.9%

JSON

Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow.

Affected configurations

Nvd
Node
videolanvlc_media_playerMatch0.8.6i
VendorProductVersionCPE
videolanvlc_media_player0.8.6icpe:/a:videolan:vlc_media_player:0.8.6i:::

Related

debiancve 1
ubuntucve 1
nvd 1
prion 1
cvelist 1
openvas 4
securityvulns 2
nessus 2
gentoo 1
debian 1
osv 1
debiancve
debiancve
CVE-2008-3794
2008-08-26 15:41:00
ubuntucve
ubuntucve
CVE-2008-3794
2008-08-26 00:00:00
nvd
nvd
CVE-2008-3794
2008-08-26 15:41:00
prion
prion
Integer overflow
2008-08-26 15:41:00
cvelist
cvelist
CVE-2008-3794
2008-08-26 15:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200809-06 (vlc)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200809-06 (vlc)
2008-09-24 00:00:00
Debian Security Advisory DSA 1819-1 (vlc)
2009-06-23 00:00:00
securityvulns
securityvulns
[ GLSA 200809-06 ] VLC: Multiple vulnerabilities
2008-09-09 00:00:00
VLC Media Player integer overflow
2008-09-09 00:00:00
nessus
nessus
GLSA-200809-06 : VLC: Multiple vulnerabilities
2008-09-08 00:00:00
Debian DSA-1819-1 : vlc - several vulnerabilities
2009-06-19 00:00:00
gentoo
gentoo
VLC: Multiple vulnerabilities
2008-09-07 00:00:00
debian
debian
[SECURITY] [DSA 1819-1] New vlc packages fix several vulnerabilities
2009-06-18 13:13:47
osv
osv
vlc - several vulnerabilities
2009-06-18 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.152

Percentile

95.9%

JSON
Related for CVE-2008-3794
debiancve1ubuntucve1nvd1prion1cvelist1openvas4securityvulns2nessus2gentoo1debian1osv1