Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-5032
HistoryNov 10, 2008 - 4:15 p.m.

CVE-2008-5032

2008-11-1016:15:12
CWE-119
mitre
web.nvd.nist.gov
49
cve-2008-5032
videolan
vlc media player
buffer overflow
user-assisted attacks
arbitrary code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

Affected configurations

Nvd
Node
videolanvlc_media_playerMatch0.5.0
OR
videolanvlc_media_playerMatch0.5.3
OR
videolanvlc_media_playerMatch0.6.0
OR
videolanvlc_media_playerMatch0.6.2
OR
videolanvlc_media_playerMatch0.7.0
OR
videolanvlc_media_playerMatch0.7.1
OR
videolanvlc_media_playerMatch0.7.1a
OR
videolanvlc_media_playerMatch0.7.2
OR
videolanvlc_media_playerMatch0.7.2test2
OR
videolanvlc_media_playerMatch0.7.2test3
OR
videolanvlc_media_playerMatch0.8.0
OR
videolanvlc_media_playerMatch0.8.1
OR
videolanvlc_media_playerMatch0.8.2
OR
videolanvlc_media_playerMatch0.8.4
OR
videolanvlc_media_playerMatch0.8.4test2
OR
videolanvlc_media_playerMatch0.8.4a
OR
videolanvlc_media_playerMatch0.8.5
OR
videolanvlc_media_playerMatch0.8.5test3
OR
videolanvlc_media_playerMatch0.8.5test4
OR
videolanvlc_media_playerMatch0.8.6
OR
videolanvlc_media_playerMatch0.8.6a
OR
videolanvlc_media_playerMatch0.8.6b
OR
videolanvlc_media_playerMatch0.8.6c
OR
videolanvlc_media_playerMatch0.8.6d
OR
videolanvlc_media_playerMatch0.8.6e
OR
videolanvlc_media_playerMatch0.8.6f
OR
videolanvlc_media_playerMatch0.8.6g
OR
videolanvlc_media_playerMatch0.8.6h
OR
videolanvlc_media_playerMatch0.8.6i
OR
videolanvlc_media_playerMatch0.9
OR
videolanvlc_media_playerMatch0.9.0
OR
videolanvlc_media_playerMatch0.9.1
OR
videolanvlc_media_playerMatch0.9.2
OR
videolanvlc_media_playerMatch0.9.3
OR
videolanvlc_media_playerMatch0.9.4
OR
videolanvlc_media_playerMatch0.9.5
VendorProductVersionCPE
videolanvlc_media_player0.9.0cpe:/a:videolan:vlc_media_player:0.9.0:::
videolanvlc_media_player0.9.2cpe:/a:videolan:vlc_media_player:0.9.2:::
videolanvlc_media_player0.8.1cpe:/a:videolan:vlc_media_player:0.8.1:::
videolanvlc_media_player0.8.6icpe:/a:videolan:vlc_media_player:0.8.6i:::
videolanvlc_media_player0.8.6dcpe:/a:videolan:vlc_media_player:0.8.6d:::
videolanvlc_media_player0.8.5cpe:/a:videolan:vlc_media_player:0.8.5:::
videolanvlc_media_player0.6.0cpe:/a:videolan:vlc_media_player:0.6.0:::
videolanvlc_media_player0.8.6fcpe:/a:videolan:vlc_media_player:0.8.6f:::
videolanvlc_media_player0.7.2cpe:/a:videolan:vlc_media_player:0.7.2:test2::
videolanvlc_media_player0.8.5cpe:/a:videolan:vlc_media_player:0.8.5:test3::
Rows per page:
1-10 of 361

Related

nessus 4
debiancve 2
openvas 10
cvelist 2
nvd 2
cve 1
ubuntucve 2
freebsd 1
prion 2
exploitdb 3
gentoo 1
zdt 1
saint 4
seebug 1
packetstorm 1
checkpoint_advisories 1
metasploit 1
debian 1
osv 1
nessus
nessus
FreeBSD : vlc -- cue processing stack overflow (4b09378e-addb-11dd-a578-0030843d3802)
2008-11-09 00:00:00
VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows
2008-11-10 00:00:00
GLSA-200812-24 : VLC: Multiple vulnerabilities
2008-12-26 00:00:00
debiancve
debiancve
CVE-2008-5032
2008-11-10 16:15:12
CVE-2008-5036
2008-11-10 22:18:34
openvas
openvas
FreeBSD Ports: vlc
2008-11-19 00:00:00
VLC Media Player Multiple Stack-Based BOF Vulnerabilities (Nov 2008) - Linux
2008-11-14 00:00:00
VLC Media Player Multiple Stack-Based BOF Vulnerabilities - Nov08 (Linux)
2008-11-14 00:00:00
cvelist
cvelist
CVE-2008-5032
2008-11-10 16:00:00
CVE-2008-5036
2008-11-10 22:00:00
nvd
nvd
CVE-2008-5032
2008-11-10 16:15:12
CVE-2008-5036
2008-11-10 22:18:34
cve
cve
CVE-2008-5036
2008-11-10 22:18:34
ubuntucve
ubuntucve
CVE-2008-5036
2008-11-10 00:00:00
CVE-2008-5032
2008-11-10 00:00:00
freebsd
freebsd
vlc -- cue processing stack overflow
2008-11-05 00:00:00
prion
prion
Stack overflow
2008-11-10 16:15:00
Stack overflow
2008-11-10 22:18:00
exploitdb
exploitdb
VideoLAN VLC Media Player < 0.9.6 - 'CUE' Local Buffer Overflow (PoC)
2009-09-15 00:00:00
VideoLAN VLC Media Player 0.9.5 - RealText Subtitle Overflow (Metasploit)
2012-03-02 00:00:00
VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow
2008-11-07 00:00:00
gentoo
gentoo
VLC: Multiple vulnerabilities
2008-12-24 00:00:00
zdt
zdt
VLC Media Player RealText Subtitle Overflow
2012-03-02 00:00:00
saint
saint
VLC media player RealText subtitle file ParseRealText buffer overflow
2008-12-01 00:00:00
VLC media player RealText subtitle file ParseRealText buffer overflow
2008-12-01 00:00:00
VLC media player RealText subtitle file ParseRealText buffer overflow
2008-12-01 00:00:00
seebug
seebug
VLC Media Player RealText Subtitle Overflow
2012-03-03 00:00:00
packetstorm
packetstorm
VLC Media Player RealText Subtitle Overflow
2012-03-03 00:00:00
checkpoint_advisories
checkpoint_advisories
VideoLAN VLC Media Player RealText File Buffer Overflow (CVE-2008-5036)
2009-10-01 00:00:00
metasploit
metasploit
VLC Media Player RealText Subtitle Overflow
2012-03-01 22:06:40
debian
debian
[SECURITY] [DSA 1819-1] New vlc packages fix several vulnerabilities
2009-06-18 13:13:47
osv
osv
vlc - several vulnerabilities
2009-06-18 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON
Related for CVE-2008-5032
nessus4debiancve2openvas10cvelist2nvd2cve1ubuntucve2freebsd1prion2exploitdb3gentoo1zdt1saint4seebug1packetstorm1checkpoint_advisories1metasploit1debian1osv1