PT-2008-1151 · Videolan · Vlc Media Player
G
·
Published
2008-08-20
·
Updated
2017-09-29
·
CVE-2008-3794
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
VLC Media Player version 0.8.6i
Description
The issue is related to an integer signedness error in the
mms ReceiveCommand function, located in modules/access/mms/mmstu.c, which can be exploited by a remote attacker to execute arbitrary code. This is achieved through a crafted mmst link containing a negative size value, bypassing a size check and triggering an integer overflow, followed by a buffer overflow.Recommendations
For VLC Media Player version 0.8.6i, consider disabling the
mms ReceiveCommand function as a temporary workaround until a patch is available. Restrict access to the mmstu.c module to minimize the risk of exploitation. Avoid using crafted mmst links with negative size values in the affected API endpoint until the issue is resolved.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vlc Media Player