critical9.3Public exploit code

CVE-2008-5036

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid Rea…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

VideoLAN VLC Media Player 0.9.5 - RealText Subtitle Overflow (Metasploit)2012-03-02 · local · windows · Verified
VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow2008-11-07 · local · windows · Verified

Impact

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.

Affected products

Vendor	Product	Affected versions
Videolan	Vlc Media Player	Versions 0.9, 0.9.0, 0.9.1, 0.9.2, 0.9.3, 0.9.4

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References