CVE-2007-6681: videolan vlc

Modified

AliasesDEBIAN-CVE-2007-6681

Published 17-01-2008Last modified 07-08-2024

Vulnerability summary

CVE-2007-6681 is a high (CVSS 7.5) vulnerability in videolan vlc. EPSS estimates a 17.29% chance of exploitation in the next 30 days, higher than 97.1% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 23-05-2008)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

17.29%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2exploit-database

Advisory lineage

Upstream 0 · Downstream 1

DSA-1543-1

Timeline

17-01-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

17.29%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 17.29% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

exploit-databaselocalwindowsVerified
VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal
Maturity: weaponized
exploit-databaselocalwindowsVerified
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Debian1 product

vlc< 0.8.6.c-4.1

Videolan1 product

vlc≤ 0.8.6d

2 vendors · 2 products

References

19 links

secunia.com/advisories/29284Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1543Vendor AdvisoryX Refsource DEBIAN
securityreason.com/securityalert/3550Third Party AdvisoryX Refsource SREASON
www.exploit-db.com/exploits/5667ExploitX Refsource EXPLOIT DB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14334VDB EntrySignatureX Refsource OVAL
www.videolan.org/security/sa0801.phpX Refsource CONFIRM
secunia.com/advisories/28233Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200804-25.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/bid/27015VDB EntryX Refsource BID
mailman.videolan.org/pipermail/vlc-devel/2007-June/033394.htmlMailing ListX Refsource MLIST

Show all 19 references

wiki.videolan.org/Changelog/0.8.6fX Refsource CONFIRM
secunia.com/advisories/29800Third Party AdvisoryX Refsource SECUNIA
mailman.videolan.org/pipermail/vlc-devel/2007-June/032672.htmlMailing ListX Refsource MLIST
www.securityfocus.com/archive/1/485488/30/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/29766Third Party AdvisoryX Refsource SECUNIA
osvdb.org/42207VDB EntryX Refsource OSVDB
aluigi.altervista.org/adv/vlcboffs-adv.txtX Refsource MISC
www.gentoo.org/security/en/glsa/glsa-200803-13.xmlVendor AdvisoryX Refsource GENTOO
security-tracker.debian.org/tracker/CVE-2007-6681Advisory