CVE-2008-5032
Fixed in a distro release EPSS 11%
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.
Products: videolan vlc_media_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | vlc | 0.8.6.h-5 |
| Debian 13 | vlc | 0.8.6.h-5 |
| Debian 14 | vlc | 0.8.6.h-5 |
| Debian 4.0 | vlc | 0.8.6-svn20061012.debian-5.1+etch3 |
| Debian 5.0 | vlc | 0.8.6.h-4+lenny2 |