[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.51.0810141819140.1682@faron.mitre.org>
Date: Tue, 14 Oct 2008 18:19:24 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE id request: vlc
======================================================
Name: CVE-2008-4558
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4558
Reference: MISC:http://www.coresecurity.com/content/vlc-xspf-memory-corruption
Array index error in VLC media player 0.9.2 allows remote attackers to
overwrite arbitrary memory and execute arbitrary code via an XSPF
playlist file with a negative identifier tag, which passes a signed
comparison.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
