PT-2007-7482 · Videolan · Vlc Media Player

David Thiel · Published 1970-01-01 · Updated 2018-10-16 · CVE-2007-3468

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VLC Media Player version 0.8.6 and earlier

Description The issue allows remote attackers to cause a denial of service via a crafted WAV file. Multiple vulnerabilities in the VLC Media Player package may lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For versions prior to 0.8.6, update to version 0.8.6c or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted WAV files until a patch is available. Restrict access to the vulnerable input.c file to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-01753

BDU:2015-01754

BDU:2015-01755

BDU:2015-01756

BDU:2015-01765

CVE-2007-3468

DSA-1332-1

Affected Products

Vlc Media Player

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2007-3468 · Security Note
• https://bdu.fstec.ru/vul/2015-01753 · Security Note
• http://isecpartners.com/advisories/2007-001-vlc.txt · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3467 · Security Note
• https://osv.dev/vulnerability/CVE-2007-3468 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3468 · Security Note
• https://bdu.fstec.ru/vul/2015-01756 · Security Note
• https://bdu.fstec.ru/vul/2015-01765 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3316 · Security Note
• https://bdu.fstec.ru/vul/2015-01754 · Security Note
• https://bdu.fstec.ru/vul/2015-01755 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-3468 · Vendor Advisory
• http://debian.org/security/2007/dsa-1332 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-3468 · Vendor Advisory
• http://osvdb.org/38992 · Note