VLC media player RealText subtitle file ParseRealText buffer overflow

Added: 12/01/2008 CVE: CVE-2008-5036 BID: 32125 OSVDB: 49809 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability in the ParseRealText function allows command execution when a user opens a media fi...

VLC Media Player Multiple Stack-Based BOF Vulnerabilities - Nov08 (Windows)

This host is installed with VLC Media Player and is prone to Multiple Stack-Based Buffer Overflow Vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultbofvulnnov08win.nasl 5370 2017-02-20 15:24:26Z cfi $ VLC Media Player Multiple Stack-Based BOF Vulnerabilities - Nov08 Windows...

VLC Media Player Multiple Stack-Based BOF Vulnerabilities (Nov 2008) - Linux

VLC Media Player is prone to multiple stack-based buffer overflow BOF vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player Multiple Stack-Based BOF Vulnerabilities (Nov 2008) - Windows

VLC Media Player is prone to multiple stack-based buffer overflow BOF vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows

A version of VLC between 0.5.0 and 0.9.5 is installed on the remote host. Such versions are affected by the following vulnerabilities : - RealText subtitle file modules\demux\subtitle.c processing is susceptible to a buffer overflow caused by user-supplied data from a malicious subtitle file bein...

CVE-2008-5036: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText rt subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 o...