CVE-2008-1769

VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
videolanvlc
0.1.99
videolanvlc
0.1.99a:a
videolanvlc
0.1.99b:b
videolanvlc
0.1.99c:c
videolanvlc
0.1.99d:d
videolanvlc
0.1.99e:e
videolanvlc
0.1.99f:f
videolanvlc
0.1.99g:g
videolanvlc
0.1.99h:h
videolanvlc
0.1.99i:i
videolanvlc
0.2.0
videolanvlc
0.2.50
videolanvlc
0.2.60
videolanvlc
0.2.61
videolanvlc
0.2.62
videolanvlc
0.2.63
videolanvlc
0.2.70
videolanvlc
0.2.71
videolanvlc
0.2.72
videolanvlc
0.2.73
videolanvlc
0.2.80
videolanvlc
0.2.81
videolanvlc
0.2.82
videolanvlc
0.2.83
videolanvlc
0.2.90
videolanvlc
0.2.91
videolanvlc
0.2.92
videolanvlc
0.3.0
videolanvlc
0.3.1
videolanvlc
0.4.0
videolanvlc
0.4.1
videolanvlc
0.4.2
videolanvlc
0.4.3
videolanvlc
0.4.3_ac3:_ac3
videolanvlc
0.4.4
videolanvlc
0.4.5
videolanvlc
0.4.6
videolanvlc
0.5.0
videolanvlc
0.5.1
videolanvlc
0.5.2
videolanvlc
0.5.3
videolanvlc
0.6.0
videolanvlc
0.6.1
videolanvlc
0.6.2
videolanvlc
0.7.0
videolanvlc
0.7.1
videolanvlc
0.7.2
videolanvlc
0.8.0
videolanvlc
0.8.1
videolanvlc
0.8.2
videolanvlc
0.8.4
videolanvlc
0.8.4a:a
videolanvlc
0.8.5
videolanvlc
0.8.6
videolanvlc
0.8.6a:a
videolanvlc
0.8.6b:b
videolanvlc
0.8.6c:c
videolanvlc
0.8.6d:d
videolanvlc
0.8.6e:e
videolanvlc
0.8.1337
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
vlc
bullseye (security)
3.0.21-0+deb11u1
fixed
bullseye
3.0.21-0+deb11u1
fixed
bookworm
3.0.21-0+deb12u1
fixed
bookworm (security)
3.0.21-0+deb12u1
fixed
sid
3.0.21-2
fixed
trixie
3.0.21-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vlc
karmic
not-affected
jaunty
not-affected
intrepid
not-affected
hardy
Fixed 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.1
released
gutsy
ignored
feisty
ignored
dapper
ignored
Common Weakness Enumeration
References
http://bugs.gentoo.org/show_bug.cgi?id=214627#c3
http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit%3Bh=cf489d7bff3c1b36b2d5501ecf21129c78104d98
http://secunia.com/advisories/29503
http://secunia.com/advisories/29800
http://security.gentoo.org/glsa/glsa-200804-25.xml
http://wiki.videolan.org/Changelog/0.8.6f
http://www.securityfocus.com/bid/28904
http://www.videolan.org/developers/vlc/NEWS
http://www.videolan.org/security/sa0803.php
http://www.vupen.com/english/advisories/2008/0985
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14445
http://bugs.gentoo.org/show_bug.cgi?id=214627#c3
http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit%3Bh=cf489d7bff3c1b36b2d5501ecf21129c78104d98
http://secunia.com/advisories/29503
http://secunia.com/advisories/29800
http://security.gentoo.org/glsa/glsa-200804-25.xml
http://wiki.videolan.org/Changelog/0.8.6f
http://www.securityfocus.com/bid/28904
http://www.videolan.org/developers/vlc/NEWS
http://www.videolan.org/security/sa0803.php
http://www.vupen.com/english/advisories/2008/0985
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14445