CVE-2007-3316

no score yetEPSS 17%

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets.

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2007-06-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

videolan:vlc_media_player

References

http://osvdb.org/37379
http://osvdb.org/37380
http://osvdb.org/37381
http://osvdb.org/37382
http://secunia.com/advisories/25753

Check your stack JSON