CVE-2007-3316

published 2007-06-21

CVE-2007-3316: Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or…

Priority P3 46 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	vlc	< vlc 0.8.6.c-1 (bookworm)	vlc 0.8.6.c-1 (bookworm)
videolan	vlc_media_player	—	—
videolan	vlc_media_player	—	—
videolan	vlc_media_player	>= 0 < 0.8.6.c-1	0.8.6.c-1
videolan	vlc_media_player	>= 0 < 0.8.6.c-1	0.8.6.c-1
videolan	vlc_media_player	>= 0 < 0.8.6.c-1	0.8.6.c-1
videolan	vlc_media_player	>= 0 < 0.8.6.c-1	0.8.6.c-1

CVSS provenance

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

osv 9.3 CRITICAL

vendor_debian 9.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.