NVD

Id
4823  
Name
CVE-2008-5036  
Description
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-10  
Modified Date
2012-01-27  
Seq
2008-5036  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30395 4823 CVE-2008-5036 http://git.videolan.org/?p=vlc.git;a=commitdiff;h=e3cef651125701a2e33a8d75b815b3e39681a447  View
30396 4823 CVE-2008-5036 oval:org.mitre.oval:def:14329  View
30397 4823 CVE-2008-5036 GLSA-200812-24  View
30398 4823 CVE-2008-5036 7051  View
30399 4823 CVE-2008-5036 [oss-security] 20081105 VideoLAN security advisory 0810  View
30400 4823 CVE-2008-5036 [oss-security] 20081105 CVE id request: vlc  View
30401 4823 CVE-2008-5036 [oss-security] 20081110 Re: CVE id request: vlc  View
30402 4823 CVE-2008-5036 20081106 [TKADV2008-011] VLC media player RealText Processing Stack Overflow Vulnerability  View
30403 4823 CVE-2008-5036 32125  View
30404 4823 CVE-2008-5036 http://www.trapkit.de/advisories/TKADV2008-011.txt  View
30405 4823 CVE-2008-5036 http://www.videolan.org/security/sa0810.html  View
30406 4823 CVE-2008-5036 vlcmediaplayer-realtext-bo(46376)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47014 JVNDB-2008-002324 VideoLAN VLC media player におけるスタックオーバーフローの脆弱性 VideoLAN VLC media player には、スタックオーバーフローが発生する脆弱性が存在します。 CVE-2008-5036 35149 CVE-2008-5036 4823 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002324.html 2008-11-10 2009-07-08 View