Intrusion PreventionRealText.File.Parameter.Buffer.Overflow
Description
This indicates an attack attempt against a buffer-overflow vulnerability in VideoLAN VLC Media Player.
The vulnerability is caused by an error when the vulnerable software playing a specially crafted RealText (.rt) subtitle file. It allows a remote attacker to execute arbitrary code.
Affected Products
VideoLAN VLC media player 0.9.5
VideoLAN VLC media player 0.9.4
VideoLAN VLC media player 0.9.3
VideoLAN VLC media player 0.9.2
VideoLAN VLC media player 0.9.1
VideoLAN VLC media player 0.9
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Update to version 0.9.6:
http://www.videolan.org/.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-08-10 | 15.902 | Sig Added |
| ID | 17015 |
| Created | Jan 06, 2009 |
| Updated | Mar 11, 2022 |
| Risk |
|
| CVE ID | CVE-2008-5036 |
| Exploit Prediction Score | 97.01% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |