CVE-2008-3732

no score yetEPSS 13%

videolan vlc media player: no CVSS score yet. EPSS 13% chance of exploitation in the next 30 days.

Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2008-08-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

videolan:vlc_media_player

References

http://secunia.com/advisories/31512
http://security.gentoo.org/glsa/glsa-200809-06.xml
http://securityreason.com/securityalert/4170
http://www.orange-bat.com/adv/2008/adv.08.16.txt
http://www.securityfocus.com/bid/30718

Check your stack JSON