CVE-2008-5276: videolan vlc_media_player Numeric Errors

EPSS trend

Probability

7.84%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 7.84% on 21-09-2026

21-09-202621-10-2026

EPSS score

7.84%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (trapkit.de)
Maturity: unknown

References

13 links

www.trapkit.de/advisories/TKADV2008-013.txtX Refsource MISCExploit
www.securityfocus.com/archive/1/498768/100/0/threadedMailing ListX Refsource BUGTRAQ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14793VDB EntrySignatureX Refsource OVAL
www.osvdb.org/50333VDB EntryX Refsource OSVDB
www.vupen.com/english/advisories/2008/3287VDB EntryX Refsource VUPEN
git.videolan.org?p=vlc.git%3Ba=commitdiff%3Bh=d19de4e9f2211cbe5bde00726b66c47a424f4e07X Refsource CONFIRM
secunia.com/advisories/32942Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/32545VDB EntryX Refsource BID
securityreason.com/securityalert/4680Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/33315Third Party AdvisoryX Refsource SECUNIA

Show all 13 references

www.videolan.org/security/sa0811.htmlX Refsource CONFIRMVendor Advisory
security.gentoo.org/glsa/glsa-200812-24.xmlVendor AdvisoryX Refsource GENTOO
security-tracker.debian.org/tracker/CVE-2008-5276Advisory

Related vulnerabilities

CVE-2018-11516debianvlc+13.68%8y ago28-05-2018 16:00The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.CVE-2013-1954debianvlc+16.07%13y ago10-07-2013 19:00The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.CVE-2013-1868debianvlc+110.98%13y ago10-07-2013 19:00Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.CVE-2013-4388debianvlc+83.78%13y ago11-10-2013 22:00Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.CVE-2013-7340debianvlc+11.64%12y ago20-03-2014 19:00VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.CVE-2013-6934live555streaming_media+128.17%12y ago23-01-2014 21:00The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.

All vulnerabilities invlc_media_player

CVE-2008-5276: videolan vlc_media_player Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References