VULNERABILITY INTELLIGENCE
CVE-2008-2430
CVSS score9.3 HIGH
EPSS probability5.88%
CISA KEVNot currently listed
Published2008-07-07
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.
Primary references
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com