Skip to content
OpenAdvisories
Unscored DSA-1543-1 8 CVEs

vlc - several vulnerabilities

Published Apr 9, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 vlc 0.8.6-svn20061012.debian-5.1+etch2

Vulnerabilities 8

  • Unscored —
    CVE-2007-6681 Public exploit EPSS 17%

    Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-6682 Public exploit EPSS 15%

    Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote a…

  • Unscored —

    The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-f…

  • Unscored —
    CVE-2008-0073 Public exploit

    Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP serv…

  • Unscored —
    CVE-2008-0295 Public exploit EPSS 11%

    Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Pla…

  • Unscored —
    CVE-2008-0296 Public exploit EPSS 15%

    Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows …

  • Unscored —
    CVE-2008-0984 Public exploit EPSS 15%

    The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote …

  • Unscored —
    CVE-2008-1489 Public exploit EPSS 12%

    Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial …