CVE-2008-1881
7.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.25 Low
EPSS
Percentile
96.7%
Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| videolan:vlc | videolan vlc | eq | 0.8.6e |
References
aluigi.altervista.org/adv/vlcboffs-adv.txt
aluigi.org/adv/vlcboffs-adv.txt
secunia.com/advisories/28233
secunia.com/advisories/29800
security.gentoo.org/glsa/glsa-200804-25.xml
wiki.videolan.org/Changelog/0.8.6f
www.securityfocus.com/archive/1/489698
www.securityfocus.com/bid/28251
www.securityfocus.com/bid/28274
exchange.xforce.ibmcloud.com/vulnerabilities/41237
exchange.xforce.ibmcloud.com/vulnerabilities/41936
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14872
www.exploit-db.com/exploits/5250
Related
7.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.25 Low
EPSS
Percentile
96.7%