Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-5036
HistoryNov 10, 2008 - 10:18 p.m.

CVE-2008-5036

2008-11-1022:18:34
CWE-119
mitre
web.nvd.nist.gov
37
cve-2008-5036
vlc media player
buffer overflow
user-assisted
arbitrary code
realtext
subtitle file
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.

Affected configurations

Nvd
Node
videolanvlc_media_playerMatch0.9
OR
videolanvlc_media_playerMatch0.9.0
OR
videolanvlc_media_playerMatch0.9.1
OR
videolanvlc_media_playerMatch0.9.2
OR
videolanvlc_media_playerMatch0.9.3
OR
videolanvlc_media_playerMatch0.9.4
OR
videolanvlc_media_playerMatch0.9.5
VendorProductVersionCPE
videolanvlc_media_player0.9.0cpe:/a:videolan:vlc_media_player:0.9.0:::
videolanvlc_media_player0.9.2cpe:/a:videolan:vlc_media_player:0.9.2:::
videolanvlc_media_player0.9.4cpe:/a:videolan:vlc_media_player:0.9.4:::
videolanvlc_media_player0.9.3cpe:/a:videolan:vlc_media_player:0.9.3:::
videolanvlc_media_player0.9cpe:/a:videolan:vlc_media_player:0.9:::
videolanvlc_media_player0.9.5cpe:/a:videolan:vlc_media_player:0.9.5:::
videolanvlc_media_player0.9.1cpe:/a:videolan:vlc_media_player:0.9.1:::

Related

ubuntucve 2
debiancve 2
cvelist 2
openvas 10
prion 2
freebsd 1
cve 1
nvd 2
nessus 4
zdt 1
packetstorm 1
checkpoint_advisories 1
saint 4
exploitdb 3
gentoo 1
seebug 1
metasploit 1
debian 1
osv 1
ubuntucve
ubuntucve
CVE-2008-5036
2008-11-10 00:00:00
CVE-2008-5032
2008-11-10 00:00:00
debiancve
debiancve
CVE-2008-5036
2008-11-10 22:18:34
CVE-2008-5032
2008-11-10 16:15:12
cvelist
cvelist
CVE-2008-5036
2008-11-10 22:00:00
CVE-2008-5032
2008-11-10 16:00:00
openvas
openvas
VLC Media Player Multiple Stack-Based BOF Vulnerabilities (Nov 2008) - Linux
2008-11-14 00:00:00
VLC Media Player Multiple Stack-Based BOF Vulnerabilities (Nov 2008) - Windows
2008-11-14 00:00:00
VLC Media Player Multiple Stack-Based BOF Vulnerabilities - Nov08 (Linux)
2008-11-14 00:00:00
prion
prion
Stack overflow
2008-11-10 16:15:00
Stack overflow
2008-11-10 22:18:00
freebsd
freebsd
vlc -- cue processing stack overflow
2008-11-05 00:00:00
cve
cve
CVE-2008-5032
2008-11-10 16:15:12
nvd
nvd
CVE-2008-5032
2008-11-10 16:15:12
CVE-2008-5036
2008-11-10 22:18:34
nessus
nessus
FreeBSD : vlc -- cue processing stack overflow (4b09378e-addb-11dd-a578-0030843d3802)
2008-11-09 00:00:00
VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows
2008-11-10 00:00:00
GLSA-200812-24 : VLC: Multiple vulnerabilities
2008-12-26 00:00:00
zdt
zdt
VLC Media Player RealText Subtitle Overflow
2012-03-02 00:00:00
packetstorm
packetstorm
VLC Media Player RealText Subtitle Overflow
2012-03-03 00:00:00
checkpoint_advisories
checkpoint_advisories
VideoLAN VLC Media Player RealText File Buffer Overflow (CVE-2008-5036)
2009-10-01 00:00:00
saint
saint
VLC media player RealText subtitle file ParseRealText buffer overflow
2008-12-01 00:00:00
VLC media player RealText subtitle file ParseRealText buffer overflow
2008-12-01 00:00:00
VLC media player RealText subtitle file ParseRealText buffer overflow
2008-12-01 00:00:00
exploitdb
exploitdb
VideoLAN VLC Media Player 0.9.5 - RealText Subtitle Overflow (Metasploit)
2012-03-02 00:00:00
VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow
2008-11-07 00:00:00
VideoLAN VLC Media Player < 0.9.6 - 'CUE' Local Buffer Overflow (PoC)
2009-09-15 00:00:00
gentoo
gentoo
VLC: Multiple vulnerabilities
2008-12-24 00:00:00
seebug
seebug
VLC Media Player RealText Subtitle Overflow
2012-03-03 00:00:00
metasploit
metasploit
VLC Media Player RealText Subtitle Overflow
2012-03-01 22:06:40
debian
debian
[SECURITY] [DSA 1819-1] New vlc packages fix several vulnerabilities
2009-06-18 13:13:47
osv
osv
vlc - several vulnerabilities
2009-06-18 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON
Related for CVE-2008-5036
ubuntucve2debiancve2cvelist2openvas10prion2freebsd1cve1nvd2nessus4zdt1packetstorm1checkpoint_advisories1saint4exploitdb3gentoo1seebug1metasploit1debian1osv1