CVE-2008-5276: Buffer Overflow

Published Dec 3, 2008

Updated

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.

Affected Software

9 affected components

Videolan VLC Media Player=0.9.0

Videolan VLC Media Player=0.9.1

Videolan VLC Media Player=0.9.2

Videolan VLC Media Player=0.9.3

Videolan VLC Media Player=0.9.4

Videolan VLC Media Player=0.9.5

Videolan VLC Media Player=0.9.6

Videolan VLC Media Player=0.9.7

Videolan VLC Media Player=0.9.8

Event History

Dec 3, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-5276?

CVE-2008-5276 has a high severity rating due to its ability to allow remote attackers to execute arbitrary code.

How do I fix CVE-2008-5276?

To fix CVE-2008-5276, upgrade VLC media player to version 0.9.8 or later, as this version contains a patch for the vulnerability.

Which versions of VLC media player are affected by CVE-2008-5276?

CVE-2008-5276 affects VLC media player versions 0.9.0 through 0.9.7.

What type of vulnerability is CVE-2008-5276?

CVE-2008-5276 is classified as an integer overflow vulnerability that leads to a heap-based buffer overflow.

Can CVE-2008-5276 be exploited through a specific file type?

Yes, CVE-2008-5276 can be exploited using a malformed RealMedia (.rm) file.