Unscored severity · published Dec 3, 2008
CVE-2008-5276
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary…
–
CVSS
7.8%
EPSS
No
On KEV
Description
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Vlc Media Player · Videolan
0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5276
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5276
git.videolan.org
http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07
Vendor Advisory
http://secunia.com/advisories/32942
secunia.com
http://secunia.com/advisories/33315
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200812-24.xml
securityreason.com
http://securityreason.com/securityalert/4680
www.osvdb.org
http://www.osvdb.org/50333
More from Vlc Media Player
9.8
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption
9.8
CVE-2019-13962
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and…
9.8
CVE-2019-12874
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7
9.8
CVE-2017-10699
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a…
9.8
CVE-2016-5108
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or…