CVE-2008-3794

Integer signedness error in the mms_ReceiveCommand function in
modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote
attackers to execute arbitrary code via a crafted mmst link with a negative
size value, which bypasses a size check and triggers an integer overflow
followed by a heap-based buffer overflow.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496265&gt;

Notes