cve/2008/CVE-2008-1881.md

CVE-2008-1881

Description

Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681.

POC

Reference

• http://aluigi.altervista.org/adv/vlcboffs-adv.txt
• http://aluigi.org/adv/vlcboffs-adv.txt
• https://www.exploit-db.com/exploits/5250

Github

No PoCs found on GitHub currently.