NVD

Id
3658  
Name
CVE-2008-3794  
Description
Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-26  
Modified Date
2012-01-27  
Seq
2008-3794  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23097 3658 CVE-2008-3794 [vlc-devel] 20080824 commit: MMS integers handling fixes, including buffer overflow ( Rémi Denis-Courmont )  View
23098 3658 CVE-2008-3794 oval:org.mitre.oval:def:14531  View
23099 3658 CVE-2008-3794 GLSA-200809-06  View
23100 3658 CVE-2008-3794 4190  View
23101 3658 CVE-2008-3794 6293  View
23102 3658 CVE-2008-3794 [oss-security] 20080824 Re: CVE id request: vlc  View
23103 3658 CVE-2008-3794 http://www.orange-bat.com/adv/2008/adv.08.24.txt  View
23104 3658 CVE-2008-3794 30806  View
23105 3658 CVE-2008-3794 1020759  View
23106 3658 CVE-2008-3794 vlcmediaplayer-memmove-bo(44659)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50871 JVNDB-2008-006181 VLC Media Player の modules/access/mms/mmstu.c 関数における整数符号エラーの脆弱性 VLC Media Player の modules/access/mms/mmstu.c の mms_ReceiveCommand 関数には、整数符号エラーの脆弱性が存在します。 CVE-2008-3794 33907 CVE-2008-3794 3658 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006181.html 2008-08-26 2012-12-20 View