CVE-2007-3316
NoneCVSS
—
EPSS
17.1%
Published
Jun 21, 2007
CISA due date
—
The record
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | vlc | 0 | 0.8.6.c-1 |
| Debian:11 | vlc | 0 | 0.8.6.c-1 |
| Debian:12 | vlc | 0 | 0.8.6.c-1 |
| Debian:13 | vlc | 0 | 0.8.6.c-1 |
| Debian:3.1 | vlc | 0 | 0.8.1.svn20050314-1sarge3 |
| Debian:4.0 | vlc | 0 | 0.8.6-svn20061012.debian-5etch1 |
Related vulnerabilities
- CVE-2023-47359 Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a… Also affects vlc
- CVE-2023-47360 Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an… Also affects vlc
- CVE-2022-41325 An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4… Also affects vlc
- CVE-2012-1775 Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote… Also affects vlc
- CVE-2011-0531 demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and… Also affects vlc
- CVE-2008-5036 Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow… Also affects vlc
- CVE-2008-5032 Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow… Also affects vlc
- CVE-2008-4654 Stack-based buffer overflow in the parse_master function in the Ty demux plugin… Also affects vlc