EDB-5498

functional

Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow

view exploit source exploit_dbverifiedtype localauthor j0rganpublished 2008-04-25catalog exploit_db
01

exploited CVEs (7)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-1769USmedium6.8Exploit
VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
CVE-2008-1489USmedium6.8Exploit
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…
CVE-2008-0073USmedium6.8Exploit
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parame…
CVE-2008-0984UShigh9.3Exploit
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary…
CVE-2007-6681UShigh7.5Exploit
Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and…
CVE-2008-0295UShigh8.5Exploit
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers…
CVE-2008-0296UShigh10.0Exploit
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan