PT-2008-1144 · Videolan · Vlc Media Player+1
Luigi Auriemma
+1
·
Publicado
2008-01-16
·
Atualizado
2017-09-29
·
CVE-2008-0296
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
VideoLAN VLC Media Player versions 0.8.6d and earlier
Description
The issue is related to a heap-based buffer overflow in the libaccess realrtsp plugin. This might allow remote RTSP servers to cause a denial of service, such as an application crash, or potentially execute arbitrary code via a long string. The vulnerability can be exploited by a remote attacker, leading to either a denial of service or the execution of arbitrary code.
Recommendations
For VideoLAN VLC Media Player versions 0.8.6d and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict access to the libaccess realrtsp plugin to minimize the risk of exploitation. Avoid using the vulnerable plugin until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Vlc Media Player
Libaccess Realrtsp