Unrated severityNVD Advisory· Published Jan 17, 2008· Updated Apr 23, 2026
CVE-2007-6681
CVE-2007-6681
Description
Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
18- aluigi.altervista.org/adv/vlcboffs-adv.txtnvd
- mailman.videolan.org/pipermail/vlc-devel/2007-June/032672.htmlnvd
- mailman.videolan.org/pipermail/vlc-devel/2007-June/033394.htmlnvd
- osvdb.org/42207nvd
- secunia.com/advisories/28233nvd
- secunia.com/advisories/29284nvd
- secunia.com/advisories/29766nvd
- secunia.com/advisories/29800nvd
- security.gentoo.org/glsa/glsa-200804-25.xmlnvd
- securityreason.com/securityalert/3550nvd
- wiki.videolan.org/Changelog/0.8.6fnvd
- www.debian.org/security/2008/dsa-1543nvd
- www.gentoo.org/security/en/glsa/glsa-200803-13.xmlnvd
- www.securityfocus.com/archive/1/485488/30/0/threadednvd
- www.securityfocus.com/bid/27015nvd
- www.videolan.org/security/sa0801.phpnvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14334nvd
- www.exploit-db.com/exploits/5667nvd
News mentions
0No linked articles in our index yet.