CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.

Link	Resource
http://www.trapkit.de/advisories/TKADV2008-013.txt	Exploit
http://www.videolan.org/security/sa0811.html	Vendor Advisory
http://www.securityfocus.com/bid/32545
http://git.videolan.org/?p=vlc.git;a=commitdiff;h=d19de4e9f2211cbe5bde00726b66c47a424f4e07	Exploit
http://secunia.com/advisories/32942	Vendor Advisory
http://www.osvdb.org/50333
http://security.gentoo.org/glsa/glsa-200812-24.xml
http://secunia.com/advisories/33315
http://securityreason.com/securityalert/4680
http://www.vupen.com/english/advisories/2008/3287
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14793
http://www.securityfocus.com/archive/1/498768/100/0/threaded

Configuration 1

cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.7:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.5:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.8:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:0.9.6:*:*:*:*:*:*:*

---

Published : 2008-12-03 05:30

Updated : 2018-10-11 08:54

---

NVD link : CVE-2008-5276

Mitre link : CVE-2008-5276

No products.

CWE-189