CVE-2007-3316: Critical severity Videolan VLC Media Player vulnerability
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3316?
CVE-2007-3316 has a medium severity rating due to its potential for denial of service or arbitrary code execution.
How do I fix CVE-2007-3316?
To fix CVE-2007-3316, update VLC Media Player to version 0.8.6c or later.
What types of files can exploit CVE-2007-3316?
CVE-2007-3316 can be exploited through malicious Ogg/Vorbis files, Ogg/Theora files, or compromised CDDB entries.
In which versions of VLC Media Player is CVE-2007-3316 present?
CVE-2007-3316 is present in VLC Media Player versions 0.8.6b and 0.8.6a.
What are the consequences of exploiting CVE-2007-3316?
Exploiting CVE-2007-3316 can result in the application crashing or allowing remote attackers to execute arbitrary code.