PT-2008-1143 · Xine+1 · Xine Library+1

Luigi Auriemma

+1

·

Publicado

2008-01-16

·

Atualizado

2017-09-29

·

CVE-2008-0295

CVSS v2.0

8.5

Alta

VetorAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions VideoLAN VLC Media Player versions 0.8.6d and earlier
Description The issue is related to a heap-based buffer overflow in the real sdpplin.c module of the Xine library, used in VideoLAN VLC Media Player. This allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data. The exploitation of this issue can lead to the execution of arbitrary code or a denial of service.
Recommendations For versions 0.8.6d and earlier, consider disabling the real sdpplin.c module or restricting the use of long SDP data to minimize the risk of exploitation until a patch is available.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2019-03964
CVE-2008-0295
DSA-1543-1
DTSA-111-1

Produtos afetados

Videolan Vlc Media Player
Xine Library