p PatchFirst

CVE-2007-3316

CVE-2007-3316

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets.

EPSS 17.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • vlc Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.8.6.c-1

    Update to 0.8.6.c-1

  • vlc Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.8.6.c-1

    Update to 0.8.6.c-1

  • vlc Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.8.6.c-1

    Update to 0.8.6.c-1

Original sources

Check your server →