HTTP: VideoLAN VLC Media Player File Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the VideoLAN VLC Media Player. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

VLC media player is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Versions prior to VLC media player 0.9.6 are vulnerable.

Affected Products

Debian linux

References

BugTraq: 32125

CVE: CVE-2008-5036

URL: http://www.videolan.org/security/sa0810.html http://www.trapkit.de/advisories/tkadv2008-011.txt

Short Name

HTTP:STC:DL:VLC-MEDIA-PLY-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: VideoLAN VLC Media Player File Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?