NVD

Id
5054  
Name
CVE-2008-5276  
Description
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-03  
Modified Date
2012-01-27  
Seq
2008-5276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31582 5054 CVE-2008-5276 http://git.videolan.org/?p=vlc.git;a=commitdiff;h=d19de4e9f2211cbe5bde00726b66c47a424f4e07  View
31583 5054 CVE-2008-5276 oval:org.mitre.oval:def:14793  View
31584 5054 CVE-2008-5276 GLSA-200812-24  View
31585 5054 CVE-2008-5276 4680  View
31586 5054 CVE-2008-5276 20081130 [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability  View
31587 5054 CVE-2008-5276 32545  View
31588 5054 CVE-2008-5276 http://www.trapkit.de/advisories/TKADV2008-013.txt  View
31589 5054 CVE-2008-5276 http://www.videolan.org/security/sa0811.html  View
31590 5054 CVE-2008-5276 ADV-2008-3287  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47033 JVNDB-2008-002343 VideoLAN VLC media player の Real emuxer プラグインの ReadRealIndex 関数における整数オーバーフローの脆弱性 VideoLAN VLC media player の Real emuxer プラグインの real.c における ReadRealIndex 関数には、整数オーバーフローが発生する脆弱性が存在します。 CVE-2008-5276 35389 CVE-2008-5276 5054 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002343.html 2008-10-13 2009-07-08 View