Cloudanix VulnDB

CVE-2008-3732

None

CVSS

—

EPSS

13.4%

Published

Aug 20, 2008

CISA due date

—

The record

Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 vlc 0 0.8.6.h-2
Debian:12 vlc 0 0.8.6.h-2
Debian:13 vlc 0 0.8.6.h-2
Debian:5.0 vlc 0 0.8.6.h-1+lenny1

Related vulnerabilities