Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-3732
HistoryAug 20, 2008 - 12:00 a.m.

CVE-2008-3732

2008-08-2000:00:00
ubuntu.com
ubuntu.com
17

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.098

Percentile

94.9%

Integer overflow in the Open function in modules/demux/tta.c in VLC Media
Player 0.8.6i allows remote attackers to cause a denial of service
(application crash) or possibly execute arbitrary code via a crafted TTA
file, which triggers a heap-based buffer overflow. NOTE: some of these
details are obtained from third party information.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchvlc< 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2UNKNOWN

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.098

Percentile

94.9%