CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.125

EPSS Ranking 93.6%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2008-5276

Videolan » Vlc Media Player » Version: 0.9.0

cpe:2.3:a:videolan:vlc_media_player:0.9.0
Videolan » Vlc Media Player » Version: 0.9.1

cpe:2.3:a:videolan:vlc_media_player:0.9.1
Videolan » Vlc Media Player » Version: 0.9.2

cpe:2.3:a:videolan:vlc_media_player:0.9.2
Videolan » Vlc Media Player » Version: 0.9.3

cpe:2.3:a:videolan:vlc_media_player:0.9.3
Videolan » Vlc Media Player » Version: 0.9.4

cpe:2.3:a:videolan:vlc_media_player:0.9.4
Videolan » Vlc Media Player » Version: 0.9.5

cpe:2.3:a:videolan:vlc_media_player:0.9.5
Videolan » Vlc Media Player » Version: 0.9.6

cpe:2.3:a:videolan:vlc_media_player:0.9.6
Videolan » Vlc Media Player » Version: 0.9.7

cpe:2.3:a:videolan:vlc_media_player:0.9.7
Videolan » Vlc Media Player » Version: 0.9.8

cpe:2.3:a:videolan:vlc_media_player:0.9.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5276

Products

Pricing

Contact Us