Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 10 Nov 2008 13:05:23 -0500 (EST)
From: "Steven M. Christey" <>
Subject: Re: CVE id request: vlc

Name: CVE-2008-5032
Status: Candidate
Reference: MLIST:[oss-security] 20081105 CVE id request: vlc
Reference: URL:
Reference: MLIST:[oss-security] 20081105 VideoLAN security advisory 0810
Reference: URL:
Reference: MISC:
Reference: MISC:
Reference: CONFIRM:;a=commitdiff;h=5f63f1562d43f32331006c2c1a61742de031b84d
Reference: CONFIRM:;a=commitdiff;h=e3cef651125701a2e33a8d75b815b3e39681a447
Reference: CONFIRM:

Multiple stack-based buffer overflows in VideoLAN VLC media player
0.5.0 through 0.9.5 allow user-assisted attackers to execute arbitrary
code via (1) the header of an invalid CUE image file, related to
modules/access/vcd/cdrom.c; or (2) an invalid RealText (rt) subtitle
file, related to the ParseRealText function in

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.