p PatchFirst

CVE-2008-0295

CVE-2008-0295

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.

EPSS 11.1% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • vlc Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.8.6.c-6

    Update to 0.8.6.c-6

  • vlc Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.8.6.c-6

    Update to 0.8.6.c-6

  • vlc Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.8.6.c-6

    Update to 0.8.6.c-6

Original sources

Check your server →