CVE-2007-3468
published 2007-06-27CVE-2007-3468: input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an…
PriorityP425high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.92%
85.3th percentile
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | vlc | < vlc 0.8.6.c.debian-1 (bookworm) | vlc 0.8.6.c.debian-1 (bookworm) |
| videolan | vlc_media_player | <= 0.8.6b | — |
| videolan | vlc_media_player | >= 0 < 0.8.6.c.debian-1 | 0.8.6.c.debian-1 |
| videolan | vlc_media_player | >= 0 < 0.8.6.c.debian-1 | 0.8.6.c.debian-1 |
| videolan | vlc_media_player | >= 0 < 0.8.6.c.debian-1 | 0.8.6.c.debian-1 |
| videolan | vlc_media_player | >= 0 < 0.8.6.c.debian-1 | 0.8.6.c.debian-1 |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2007-3468: vlc - input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to ca...
vendor_debian·2007·CVSS 7.8
CVE-2007-3468 [HIGH] CVE-2007-3468: vlc - input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to ca...
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.
Scope: local
bookworm: resolved (fixed in 0.8.6.c.debian-1)
bullseye: resolved (fixed in 0.8.6.c.debian-1)
forky: resolved (fixed in 0.8.6.c.debian-1)
sid: resolved (fixed in 0.8.6.c.debian-1)
trixie: resolved (fixed in 0.8.6.c.debian-1)
GHSA
GHSA-jpg5-4x2v-qmh4: input
ghsa_unreviewed·2022-05-01
CVE-2007-3468 [HIGH] GHSA-jpg5-4x2v-qmh4: input
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.
OSV
CVE-2007-3468: input
osv·2007-06-27·CVSS 7.8
CVE-2007-3468 [HIGH] CVE-2007-3468: input
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/38992http://secunia.com/advisories/25980http://www.debian.org/security/2007/dsa-1332http://www.isecpartners.com/advisories/2007-001-vlc.txthttp://www.securityfocus.com/archive/1/471933/100/0/threadedhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14744http://osvdb.org/38992http://secunia.com/advisories/25980http://www.debian.org/security/2007/dsa-1332http://www.isecpartners.com/advisories/2007-001-vlc.txthttp://www.securityfocus.com/archive/1/471933/100/0/threadedhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14744
2007-06-27
Published