CVE-2008-1768
Estado: ModificadaMedia (6.8)—
Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.71%
- Percentil entre todas las CVEs puntuadas: 85
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
- http://secunia.com/advisories/29503
- http://secunia.com/advisories/29800
- http://security.gentoo.org/glsa/glsa-200804-25.xml
- http://wiki.videolan.org/Changelog/0.8.6f
- http://www.securityfocus.com/bid/28903
- http://www.videolan.org/developers/vlc/NEWS
- http://www.videolan.org/security/sa0803.php
- http://www.vupen.com/english/advisories/2008/0985
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14412
- http://secunia.com/advisories/29503
- http://secunia.com/advisories/29800
- http://security.gentoo.org/glsa/glsa-200804-25.xml
- http://wiki.videolan.org/Changelog/0.8.6f
- http://www.securityfocus.com/bid/28903
- http://www.videolan.org/developers/vlc/NEWS
- http://www.videolan.org/security/sa0803.php
- http://www.vupen.com/english/advisories/2008/0985
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14412
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-1768",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-04-25T06:05:00.000",
"references": [
{
"url": "http://secunia.com/advisories/29503",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/29800",
"source": "cve@mitre.org"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200804-25.xml",
"source": "cve@mitre.org"
},
{
"url": "http://wiki.videolan.org/Changelog/0.8.6f",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/28903",
"source": "cve@mitre.org"
},
{
"url": "http://www.videolan.org/developers/vlc/NEWS",
"source": "cve@mitre.org"
},
{
"url": "http://www.videolan.org/security/sa0803.php",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0985",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14412",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/29503",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/29800",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200804-25.xml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://wiki.videolan.org/Changelog/0.8.6f",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/28903",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.videolan.org/developers/vlc/NEWS",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.videolan.org/security/sa0803.php",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0985",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14412",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow."
},
{
"lang": "es",
"value": "Múltiples desbordamientos de enteros en VLC anterior a 0.8.6f, permite a atacantes remotos provocar una denegación de servicio (caída) a través del demultiplexador (1) MP4, (2) Real y (3) el codec Cinepak, que inicia el desbordamiento de búfer."
}
],
"lastModified": "2026-06-16T22:52:27.140",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "929E49D1-B8F6-4A25-A93F-D8211520ED61"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B61BB1FD-6D2A-42EA-9824-9A8FD728B4CE"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76DDF802-26C2-437E-BB01-F01209FFE0BB"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "546BAE28-5B2A-4856-8B2A-316D9AD2F5A8"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56926B35-987F-4C12-9FBC-61BF7CEE1541"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D8FAE03-C528-4BAD-823E-EEEC4368113D"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C5B604B-5A7A-450A-8252-60FDCB114283"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99g:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78FCD5D6-A4A9-48CD-BD0E-296FD1032907"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99h:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5624A925-C0D8-4E85-9B32-085BB9059FFE"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.1.99i:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28E35B1D-3191-4E18-B265-ACA736A87645"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60FCBA5D-568F-424B-BFB1-1BA41DB0D6B6"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "656BBC4D-8569-4A91-87DF-93D053BEEC57"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C9C7B19-59F4-43FB-8122-AAD36ABDF807"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E2DB4C0-CCEE-40D6-B227-E00A002D755B"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01BE9872-10B5-466E-BEE4-69B6451076C9"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6125D6E-6416-49E8-8770-5C0590F3FA0A"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27122F7C-1D19-41D8-B323-A6941D0DE193"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.71:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6068DB81-542B-43F0-9B42-CEA7689F61D8"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A009555D-CC59-4C6A-B350-E7F4730F5B7B"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.73:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3299D365-015F-4A95-80C3-977853E70E1D"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.80:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47EC751E-FB47-4263-B9ED-FBBAAEA677F7"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.81:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BA7C125-989A-4727-9E59-44ACC1750E6B"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.82:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC105DEB-DE1F-4183-8A4A-F7E58FBB82C6"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.83:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "521F12A2-7785-48C9-BB11-E91CEF61584F"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25A412BA-A195-4893-B5F8-EE6FC9A53326"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.91:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6ADA95A-A8B2-4E3E-A3E4-AEA03B14C339"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.2.92:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7823310-E6C2-42D6-A0CC-8D2A0CA5EB6E"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBE2DF23-1CF5-4371-82EF-7072B0FCC226"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F706E26-E58D-4B5C-98AC-A386BF7ABC24"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E19F3E58-0D65-45AF-8024-E3A7CFD05142"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B24956D-A924-40BC-A340-3BE9DD3CCBA3"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F94AC83A-6790-4E26-A4B8-E2B4394CB3FA"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD6F543A-8520-4F13-9C03-9520A6B92944"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.3_ac3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3991F10-CFC4-4979-B5D4-F9EFB9992683"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01FC4A5C-5A0A-40CF-891B-97443CC4A367"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6656C05D-4A4B-47DE-9844-308FD98CFF04"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CBF1B20-1478-472C-B9A1-974A7A5333C6"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C29EDDF9-DE90-4AA7-8454-D42B4C37ECF0"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02AF1C9A-FD6F-4CA4-8275-8B7655F861F2"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B56B15F-7504-4D55-8C31-1C28F1A8129D"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C6BB497-20F6-4CCB-A24E-7228BE68CA5B"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D2855B3-D0ED-4C8E-95A0-151E88F95057"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56B90DCE-2EA9-49AA-9F63-0515C751E821"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34C4F8C4-EEA4-4369-BBC8-C726059C8852"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2821324-7A44-40CD-95B8-F4B5B09E6D69"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A98AC34-2FAB-4CAE-9D14-B4E11CC2AFB3"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "347E213C-83AF-4F98-8096-2113E00C1BC4"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A26753D-44F2-49F6-8486-1DD61297C037"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67C2B1C1-1606-411D-A9CA-D1A654FD4133"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28BBBBAF-71F7-4F47-ADE6-FF7B590832E1"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AC67A7B-21E0-45DA-A70F-EE97079140A7"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.4a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1062EB82-2A6C-4770-A339-21686FF9E923"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEA7ECBE-1CAE-47C5-ACC1-F7BBA3946CCA"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50A23534-3DF7-422A-B997-1FB16D8564C9"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.6a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E85F765-D2DF-41C0-A90F-732861CA32F3"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.6b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26981B0C-6A7E-40BA-8F50-0C19870258FE"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.6c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89FAFEE4-35FE-44BE-90DD-1E067A1A2AAA"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.6d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "686E1C6D-CDE6-4615-B983-3BCDDDE921AD"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.6e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6545867A-07ED-4E16-AED0-566C5CCD46FE"
},
{
"criteria": "cpe:2.3:a:videolan:vlc:0.8.1337:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "053BE4FF-4699-42E8-B480-DA2224EC2BDE"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}