CVE-2008-1769: videolan vlc Resource Management Errors
Vulnerability summary
CVE-2008-1769 is a medium (CVSS 6.8) Resource Management Errors vulnerability in videolan vlc. EPSS estimates a 7.16% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities. 1 public exploit is recorded.
Weaponized exploit (exploit-database, 25-04-2008)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 24-04-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.16%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
No change 0.00 pp
From 7.16% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundKantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian1 product
- vlc< 0.8.6.e-2.1
Videolan1 product
- vlc0.1.99 | 0.1.99a | 0.1.99b | 0.1.99c | 0.1.99d | 0.1.99e | 0.1.99f | 0.1.99g | 0.1.99h | 0.1.99i | 0.2.0 | 0.2.50 | 0.2.60 | 0.2.61 | 0.2.62 | 0.2.63 | 0.2.70 | 0.2.71 | 0.2.72 | 0.2.73 | 0.2.80 | 0.2.81 | 0.2.82 | 0.2.83 | 0.2.90 | 0.2.91 | 0.2.92 | 0.3.0 | 0.3.1 | 0.4.0 | 0.4.1 | 0.4.2 | 0.4.3 | 0.4.3_ac3 | 0.4.4 | 0.4.5 | 0.4.6 | 0.5.0 | 0.5.1 | 0.5.2 | 0.5.3 | 0.6.0 | 0.6.1 | 0.6.2 | 0.7.0 | 0.7.1 | 0.7.2 | 0.8.0 | 0.8.1 | 0.8.2 | 0.8.4 | 0.8.4a | 0.8.5 | 0.8.6 | 0.8.6a | 0.8.6b | 0.8.6c | 0.8.6d | 0.8.6e | 0.8.1337
2 vendors · 2 products
References
12 links- www.videolan.org/security/sa0803.phpX Refsource CONFIRM
- www.videolan.org/developers/vlc/NEWSX Refsource CONFIRM
- wiki.videolan.org/Changelog/0.8.6fX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14445VDB EntrySignatureX Refsource OVAL
- bugs.gentoo.org/show_bug.cgi?id=214627X Refsource MISC