CVE-2010-0364: Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted…

PriorityP342critical9.3CVSS 2.0

AVNACMAuNCCICAC

EXPLOIT

EPSS

6.58%

93.0th percentile

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	vlc	< vlc 0.8.6.c-4.1 (bookworm)	vlc 0.8.6.c-4.1 (bookworm)
videolan	vlc_media_player	—	—
videolan	vlc_media_player	>= 0 < 0.8.6.c-4.1	0.8.6.c-4.1
videolan	vlc_media_player	>= 0 < 0.8.6.c-4.1	0.8.6.c-4.1
videolan	vlc_media_player	>= 0 < 0.8.6.c-4.1	0.8.6.c-4.1
videolan	vlc_media_player	>= 0 < 0.8.6.c-4.1	0.8.6.c-4.1

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C

osv9.3CRITICAL

vendor_debian9.3LOW

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.