Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-5032

Fixed in a distro release EPSS 11%

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

Published 2008-11-10 · CVE record · OSV

Products: videolan vlc_media_player

Distro releases

ReleasePackageFixed in
Debian 12vlc0.8.6.h-5
Debian 13vlc0.8.6.h-5
Debian 14vlc0.8.6.h-5
Debian 4.0vlc0.8.6-svn20061012.debian-5.1+etch3
Debian 5.0vlc0.8.6.h-4+lenny2