p PatchFirst

CVE-2008-5032

CVE-2008-5032

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

EPSS 10.7% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • vlc Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.8.6.h-5

    Update to 0.8.6.h-5

  • vlc Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.8.6.h-5

    Update to 0.8.6.h-5

  • vlc Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.8.6.h-5

    Update to 0.8.6.h-5

Original sources

Check your server →