Vulnerability in N/a

CVE-2008-1881

Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-…

EPSS: 0.540 (98.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

vlc-parsessa-bo(41936) (vdb-entry, x_refsource_XF)
aluigi.org/adv/vlcboffs-adv.txt (x_refsource_MISC)
20080317 VLC highlander bug (mailing-list, x_refsource_BUGTRAQ)
28233 (x_refsource_SECUNIA, third-party-advisory)
GLSA-200804-25 (vendor-advisory, x_refsource_GENTOO)
wiki.videolan.org/Changelog/0.8.6f (x_refsource_CONFIRM)
28274 (vdb-entry, x_refsource_BID)
29800 (x_refsource_SECUNIA, third-party-advisory)
oval:org.mitre.oval:def:14872 (x_refsource_OVAL, signature, vdb-entry)
5250 (exploit, x_refsource_EXPLOIT-DB)