The remote host is affected by the vulnerability described in GLSA-200812-24 (VLC: Multiple vulnerabilities)

    Tobias Klein reported the following vulnerabilities:
    A     stack-based buffer overflow when processing CUE image files in     modules/access/vcd/cdrom.c (CVE-2008-5032).
    A stack-based     buffer overflow when processing RealText (.rt) subtitle files in the     ParseRealText() function in modules/demux/subtitle.c     (CVE-2008-5036).
    An integer overflow when processing RealMedia     (.rm) files in the ReadRealIndex() function in real.c in the Real     demuxer plugin, leading to a heap-based buffer overflow     (CVE-2008-5276).
  Impact :

    A remote attacker could entice a user to open a specially crafted CUE     image file, RealMedia file or RealText subtitle file, possibly     resulting in the execution of arbitrary code with the privileges of the     user running the application.
  Workaround :

    There is no known workaround at this time.

The VLC Team reports :

The VLC media player contains a stack overflow vulnerability while parsing malformed cue files. The vulnerability may be exploited by a (remote) attacker to execute arbitrary code in the context of VLC media player.

A version of VLC between 0.5.0 and 0.9.5 is installed on the remote host.  Such versions are affected by the following vulnerabilities :

  - RealText subtitle file (modules\demux\subtitle.c)     processing is susceptible to a buffer overflow caused     by user-supplied data from a malicious subtitle file     being copied into static buffers without proper     validation.

  - CUE image file (modules\access\vcd\cdrom.c)     processing is susceptible to a stack-based buffer     overflow because data supplied by the CUE file is     supplied as an array index without proper validation.

An attacker may be able to leverage these issues to execute arbitrary code on the remote host by tricking a user into opening a specially crafted video file using the affected application.

Several vulnerabilities have been discovered in vlc, a multimedia player and streamer. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2008-1768     Drew Yao discovered that multiple integer overflows in     the MP4 demuxer, Real demuxer and Cinepak codec can lead     to the execution of arbitrary code.

  - CVE-2008-1769     Drew Yao discovered that the Cinepak codec is prone to a     memory corruption, which can be triggered by a crafted     Cinepak file.

  - CVE-2008-1881     Luigi Auriemma discovered that it is possible to execute     arbitrary code via a long subtitle in an SSA file.

  - CVE-2008-2147     It was discovered that vlc is prone to a search path     vulnerability, which allows local users to perform     privilege escalations.

  - CVE-2008-2430     Alin Rad Pop discovered that it is possible to execute     arbitrary code when opening a WAV file containing a     large fmt chunk.

  - CVE-2008-3794     Pinar Yanardag discovered that it is possible to     execute arbitrary code when opening a crafted mmst link.

  - CVE-2008-4686     Tobias Klein discovered that it is possible to execute     arbitrary code when opening a crafted .ty file.

  - CVE-2008-5032     Tobias Klein discovered that it is possible to execute     arbitrary code when opening an invalid CUE image file     with a crafted header.

A version of VLC between 0.5.0 and 0.9.5 is installed on the remote host.  Such versions are affected by the following vulnerabilities : 

  - RealText subtitle file (modules\demux\subtitle.c) processing is susceptible to a buffer overflow caused by user-supplied data from a malicious subtitle file being copied into static buffers without proper validation.
  - CUE image file (modules\access\vcd\cdrom.c) processing is susceptible to a stack-based buffer overflow because data supplied by the CUE file is supplied as an array index without proper validation.

An attacker may be able to leverage these issues to execute arbitrary code on the remote host by tricking a user into opening a specially crafted video file using the affected application.

ID	名稱	產品	系列	已發布	已更新	嚴重性
35271	GLSA-200812-24 : VLC: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/12/26	2021/1/6	high
34723	FreeBSD : vlc -- cue processing stack overflow (4b09378e-addb-11dd-a578-0030843d3802)	Nessus	FreeBSD Local Security Checks	2008/11/9	2021/1/6	high
34730	VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows	Nessus	Windows	2008/11/10	2018/11/15	high
39451	Debian DSA-1819-1 : vlc - several vulnerabilities	Nessus	Debian Local Security Checks	2009/6/19	2021/1/4	high
4747	VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows	Nessus Network Monitor	Web Clients	2008/11/12	2019/3/6	medium

偵測

搜尋 Plugin

high

high

high

high

medium