NuytsTech Security

CVE-2008-5276

by ·

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.

Date published : 2008-12-03

http://www.securityfocus.com/bid/32545

http://www.securityfocus.com/archive/1/498768/100/0/threaded

Tags: