← Database

CVE-2008-5276

CRITICAL CVSS: 9.3 Published: 2008-12-03 Modified: 2026-06-16

Description

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.

Affected Platforms

Videolan Vlc Media Player

Weakness Type

CWE-189

References