DEBIAN-CVE-2008-3794

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2008-3794
Published: 26 Aug 2008, 15:41
Last modified:28 Apr 2026, 20:10

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Aug 2008, 15:41
Published
Vulnerability first disclosed
28 Apr 2026, 20:10
Last Modified
Vulnerability information updated

Description

Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow.

Affected Systems

  • debian•vlc

    < 0.8.6.h-4 | < 0.8.6.h-4 | < 0.8.6.h-4 | < 0.8.6.h-4

References (1)