Unrated severityNVD Advisory· Published Jun 27, 2007· Updated Jun 16, 2026

CVE-2007-3468

Description

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.

Affected products

VideoLAN/VLC media player2 versions
cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*range: <=0.8.6b
- (no CPE)range: <0.8.6c

Patches

Vulnerability mechanics

References

www.isecpartners.com/advisories/2007-001-vlc.txtnvdPatch
osvdb.org/38992nvd
secunia.com/advisories/25980nvd
www.debian.org/security/2007/dsa-1332nvd
www.securityfocus.com/archive/1/471933/100/0/threadednvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14744nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000