CVE-2008-5036

Related Files

VLC Media Player RealText Subtitle Overflow

Posted Mar 3, 2012

Authored by Tobias Klein, SkD, juan vazquez | Site metasploit.com

This Metasploit module exploits a stack buffer overflow vulnerability in VideoLAN VLC versions prior to 0.9.6. The vulnerability exists in the parsing of RealText subtitle files. In order to exploit this, this module will generate two files: The .mp4 file is used to trick your victim into running. The .rt file is the actual malicious file that triggers the vulnerability, which should be placed under the same directory as the .mp4 file.

tags | exploit, overflow

advisories | CVE-2008-5036, OSVDB-49809

SHA-256 | 9952cf454696629976235ec8de966c57016db79252896be88870fdf2312f2133

Download | Favorite | View

Gentoo Linux Security Advisory 200812-24

Posted Dec 30, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200812-24 - Multiple vulnerabilities in VLC may lead to the remote execution of arbitrary code. Versions less than 0.9.8a are affected.

tags | advisory, remote, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2008-5032, CVE-2008-5036, CVE-2008-5276

SHA-256 | ff1ca98bd0aaf2698929a17f1552ed1d294f532e680c752f8d686e4b8a1b1b94

Download | Favorite | View