CVE-2008-0295: Buffer Overflow
Heap-based buffer overflow in modules/access/rtsp/realsdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0295?
CVE-2008-0295 is considered a high-severity vulnerability due to the possibility of remote code execution and denial of service.
How do I fix CVE-2008-0295?
To fix CVE-2008-0295, upgrade to a version of VideoLAN VLC Media Player later than 0.8.6d.
What kind of attack does CVE-2008-0295 facilitate?
CVE-2008-0295 facilitates user-assisted remote attacks that can result in denial of service or arbitrary code execution.
Which versions of VLC Media Player are affected by CVE-2008-0295?
VLC Media Player versions up to and including 0.8.6d are affected by CVE-2008-0295.
Is there a patch available for CVE-2008-0295?
Yes, a patch is available and users should upgrade to the latest version of VLC Media Player to mitigate CVE-2008-0295.