CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/11/05/5
http://www.videolan.org/security/sa0810.html	Vendor Advisory
http://www.trapkit.de/advisories/TKADV2008-012.txt	Exploit
http://www.openwall.com/lists/oss-security/2008/11/05/4
http://git.videolan.org/?p=vlc.git;a=commitdiff;h=5f63f1562d43f32331006c2c1a61742de031b84d
http://www.openwall.com/lists/oss-security/2008/11/10/13
http://security.gentoo.org/glsa/glsa-200812-24.xml
http://secunia.com/advisories/33315	Vendor Advisory
http://www.securityfocus.com/bid/32125
http://secunia.com/advisories/32569	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46375
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14798
http://www.securityfocus.com/archive/1/498112/100/0/threaded

Configuration 1

cpe:2.3:a:videolan:vlc_media_player:0.8.6b:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.7.2:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6g:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.5.0:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.4a:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.0:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.4:test2:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.7.1a:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.5:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.6.2:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.5:test3:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6h:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.4:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.7.2:test3:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6c:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6i:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.7.0:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.7.2:test2:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.5.3:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6a:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.5:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.6.0:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.5:test4:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6f:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.1:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6e:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.6d:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.7.1:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.8.2:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*

---

Published : 2008-11-10 04:15

Updated : 2018-10-11 08:53

---

NVD link : CVE-2008-5032

Mitre link : CVE-2008-5032

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer