Unrated severityNVD Advisory· Published Jan 16, 2008· Updated Jun 16, 2026
CVE-2008-0295
CVE-2008-0295
Description
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*range: <=0.8.6d
- (no CPE)range: <=0.8.6d
Patches
Vulnerability mechanics
References
9- secunia.com/advisories/28383nvdVendor Advisory
- aluigi.altervista.org/adv/vlcxhof-adv.txtnvd
- secunia.com/advisories/29284nvd
- secunia.com/advisories/29766nvd
- www.debian.org/security/2008/dsa-1543nvd
- www.gentoo.org/security/en/glsa/glsa-200803-13.xmlnvd
- www.securityfocus.com/bid/27221nvd
- www.vupen.com/english/advisories/2008/0105nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14776nvd
News mentions
0No linked articles in our index yet.