CVE-2008-1768

EUVD-2008-1768
Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
videolanvlc
0.1.99
videolanvlc
0.1.99a:a
videolanvlc
0.1.99b:b
videolanvlc
0.1.99c:c
videolanvlc
0.1.99d:d
videolanvlc
0.1.99e:e
videolanvlc
0.1.99f:f
videolanvlc
0.1.99g:g
videolanvlc
0.1.99h:h
videolanvlc
0.1.99i:i
videolanvlc
0.2.0
videolanvlc
0.2.50
videolanvlc
0.2.60
videolanvlc
0.2.61
videolanvlc
0.2.62
videolanvlc
0.2.63
videolanvlc
0.2.70
videolanvlc
0.2.71
videolanvlc
0.2.72
videolanvlc
0.2.73
videolanvlc
0.2.80
videolanvlc
0.2.81
videolanvlc
0.2.82
videolanvlc
0.2.83
videolanvlc
0.2.90
videolanvlc
0.2.91
videolanvlc
0.2.92
videolanvlc
0.3.0
videolanvlc
0.3.1
videolanvlc
0.4.0
videolanvlc
0.4.1
videolanvlc
0.4.2
videolanvlc
0.4.3
videolanvlc
0.4.3_ac3:_ac3
videolanvlc
0.4.4
videolanvlc
0.4.5
videolanvlc
0.4.6
videolanvlc
0.5.0
videolanvlc
0.5.1
videolanvlc
0.5.2
videolanvlc
0.5.3
videolanvlc
0.6.0
videolanvlc
0.6.1
videolanvlc
0.6.2
videolanvlc
0.7.0
videolanvlc
0.7.1
videolanvlc
0.7.2
videolanvlc
0.8.0
videolanvlc
0.8.1
videolanvlc
0.8.2
videolanvlc
0.8.4
videolanvlc
0.8.4a:a
videolanvlc
0.8.5
videolanvlc
0.8.6
videolanvlc
0.8.6a:a
videolanvlc
0.8.6b:b
videolanvlc
0.8.6c:c
videolanvlc
0.8.6d:d
videolanvlc
0.8.6e:e
videolanvlc
0.8.1337
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
vlc
bookworm
3.0.21-0+deb12u1
fixed
bookworm (security)
3.0.21-0+deb12u1
fixed
bullseye
3.0.21-0+deb11u1
fixed
bullseye (security)
3.0.21-0+deb11u1
fixed
sid
3.0.21-2
fixed
trixie
3.0.21-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vlc
dapper
ignored
feisty
ignored
gutsy
ignored
hardy
Fixed 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.1
released
intrepid
not-affected
jaunty
not-affected
karmic
not-affected