← back
CVE-2007-6681

CVE-2007-6681

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 17%
from disclosure to weapon99 days
Published on NVDJan 17
1st PoC+99d
exploitation probability
17%top 3% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/5667unverifiedexploitdbwww.exploit-db.com/exploits/5498unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://aluigi.altervista.org/adv/vlcboffs-adv.txthttp://mailman.videolan.org/pipermail/vlc-devel/2007-June/032672.htmlhttp://mailman.videolan.org/pipermail/vlc-devel/2007-June/033394.htmlhttp://osvdb.org/42207http://secunia.com/advisories/28233http://secunia.com/advisories/29284http://secunia.com/advisories/29766http://secunia.com/advisories/29800http://security.gentoo.org/glsa/glsa-200804-25.xmlhttp://securityreason.com/securityalert/3550https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14334https://www.exploit-db.com/exploits/5667