CVE-2007-3468: High severity Videolan VLC Media Player vulnerability
Published Jun 27, 2007
·Updated
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized inbresamplers variable to be used.
Affected Software
1 affected component
Videolan VLC Media Player<=0.8.6b
Remediation
Patch Available
Event History
Jun 27, 2007
CVE Published
10:30 PM
Jun 28, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3468?
CVE-2007-3468 is classified as a denial of service vulnerability.
2
How do I fix CVE-2007-3468?
To fix CVE-2007-3468, update VideoLAN VLC Media Player to version 0.8.6c or later.
3
What type of attack does CVE-2007-3468 enable?
CVE-2007-3468 enables a remote attacker to crash the VLC Media Player.
4
Which versions of VLC Media Player are affected by CVE-2007-3468?
CVE-2007-3468 affects VLC Media Player versions before 0.8.6c.
5
What file type is specifically involved in CVE-2007-3468?
CVE-2007-3468 involves a crafted WAV file that triggers the vulnerability.