Description
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vlc | 0.9.8a-1 | — |
| Debian 13 | vlc | 0.9.8a-1 | — |
| Debian 12 | vlc | 0.9.8a-1 | — |
References
- http://www.trapkit.de/advisories/TKADV2008-013.txt
- 20081130 [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability mailing-list
- oval:org.mitre.oval:def:14793 vdb-entry signature
- 50333 vdb-entry
- ADV-2008-3287 vdb-entry
- http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07
- 32942 third-party-advisory
- 32545 vdb-entry
- 4680 third-party-advisory
- 33315 third-party-advisory
- http://www.videolan.org/security/sa0811.html
- GLSA-200812-24 vendor-advisory