CVE-2007-3316

2007-06-2100:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.832 High

EPSS

Percentile

98.4%

JSON

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media
Player before 0.8.6c allow remote attackers to cause a denial of service
(crash) or execute arbitrary code via format string specifiers in (1) an
Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital
Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast
packets.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchvlc< 0.8.6.release.c-0ubuntu3UNKNOWN
ubuntu8.04noarchvlc< 0.8.6.release.c-0ubuntu3UNKNOWN
ubuntu8.10noarchvlc< 0.8.6.release.c-0ubuntu3UNKNOWN
ubuntu9.04noarchvlc< 0.8.6.release.c-0ubuntu3UNKNOWN
ubuntu9.10noarchvlc< 0.8.6.release.c-0ubuntu3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.10	noarch	vlc	< 0.8.6.release.c-0ubuntu3	UNKNOWN
ubuntu	8.04	noarch	vlc	< 0.8.6.release.c-0ubuntu3	UNKNOWN
ubuntu	8.10	noarch	vlc	< 0.8.6.release.c-0ubuntu3	UNKNOWN
ubuntu	9.04	noarch	vlc	< 0.8.6.release.c-0ubuntu3	UNKNOWN
ubuntu	9.10	noarch	vlc	< 0.8.6.release.c-0ubuntu3	UNKNOWN