CVE-2008-2430
EPSS 7.9%vlc - heap-based buffer overflow
發布日:2008/7/7修改日:2026/4/28
描述
Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.
受影響套件(2)
- Debian/vlcfrom 0, < 0.8.6.h-1
- Debian/vlcfrom 0, < 0.8.6.e-2.3+lenny1