CVE-2008-5032

high · 9.3

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

9.3

CVSS

10.7%

EPSS (exploit prob.)

96th

EPSS percentile

2008-11-10

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
videolan	vlc_media_player	0.5.0
videolan	vlc_media_player	0.5.3
videolan	vlc_media_player	0.6.0
videolan	vlc_media_player	0.6.2
videolan	vlc_media_player	0.7.0
videolan	vlc_media_player	0.7.1
videolan	vlc_media_player	0.7.1a
videolan	vlc_media_player	0.7.2
videolan	vlc_media_player	0.7.2
videolan	vlc_media_player	0.7.2
videolan	vlc_media_player	0.8.0
videolan	vlc_media_player	0.8.1
videolan	vlc_media_player	0.8.2
videolan	vlc_media_player	0.8.4
videolan	vlc_media_player	0.8.4
videolan	vlc_media_player	0.8.4a
videolan	vlc_media_player	0.8.5
videolan	vlc_media_player	0.8.5
videolan	vlc_media_player	0.8.5
videolan	vlc_media_player	0.8.6
videolan	vlc_media_player	0.8.6a
videolan	vlc_media_player	0.8.6b
videolan	vlc_media_player	0.8.6c
videolan	vlc_media_player	0.8.6d
videolan	vlc_media_player	0.8.6e
videolan	vlc_media_player	0.8.6f
videolan	vlc_media_player	0.8.6g
videolan	vlc_media_player	0.8.6h
videolan	vlc_media_player	0.8.6i
videolan	vlc_media_player	0.9
videolan	vlc_media_player	0.9.0
videolan	vlc_media_player	0.9.1
videolan	vlc_media_player	0.9.2
videolan	vlc_media_player	0.9.3
videolan	vlc_media_player	0.9.4
videolan	vlc_media_player	0.9.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-5032