CVE-2008-2430
EPSS 7.9%vlc - heap-based buffer overflow
Published: 7/7/2008Modified: 4/28/2026
Description
Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.
Affected packages (2)
- Debian/vlcfrom 0, < 0.8.6.h-1
- Debian/vlcfrom 0, < 0.8.6.e-2.3+lenny1