Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/vlc@0.8.6.e-2.1?distro=trixie
Typedeb
Namespacedebian
Namevlc
Version0.8.6.e-2.1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version0.8.6.e-2.2
Latest_non_vulnerable_version3.0.23-3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-3z8d-fmkm-vbg9
vulnerability_id VCID-3z8d-fmkm-vbg9
summary VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1769
reference_id
reference_type
scores
0
value 0.26634
scoring_system epss
scoring_elements 0.96428
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1769
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1769
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1769
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478140
reference_id 478140
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478140
3
reference_url https://security.gentoo.org/glsa/200804-25
reference_id GLSA-200804-25
reference_type
scores
url https://security.gentoo.org/glsa/200804-25
fixed_packages
0
url pkg:deb/debian/vlc@0.8.6.e-2.1?distro=trixie
purl pkg:deb/debian/vlc@0.8.6.e-2.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@0.8.6.e-2.1%3Fdistro=trixie
1
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/vlc@3.0.23-3?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-3%3Fdistro=trixie
aliases CVE-2008-1769
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3z8d-fmkm-vbg9
1
url VCID-czjd-h9eu-x7d6
vulnerability_id VCID-czjd-h9eu-x7d6
summary Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1768
reference_id
reference_type
scores
0
value 0.01879
scoring_system epss
scoring_elements 0.83454
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1768
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1768
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1768
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478140
reference_id 478140
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478140
3
reference_url https://security.gentoo.org/glsa/200804-25
reference_id GLSA-200804-25
reference_type
scores
url https://security.gentoo.org/glsa/200804-25
fixed_packages
0
url pkg:deb/debian/vlc@0.8.6.e-2.1?distro=trixie
purl pkg:deb/debian/vlc@0.8.6.e-2.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@0.8.6.e-2.1%3Fdistro=trixie
1
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/vlc@3.0.23-3?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-3%3Fdistro=trixie
aliases CVE-2008-1768
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-czjd-h9eu-x7d6
2
url VCID-ygt3-byr3-7qd7
vulnerability_id VCID-ygt3-byr3-7qd7
summary Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1881
reference_id
reference_type
scores
0
value 0.53989
scoring_system epss
scoring_elements 0.98049
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1881
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1881
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1881
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=477805
reference_id 477805
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=477805
3
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/5250.cpp
reference_id CVE-2008-1881
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/5250.cpp
4
reference_url https://security.gentoo.org/glsa/200804-25
reference_id GLSA-200804-25
reference_type
scores
url https://security.gentoo.org/glsa/200804-25
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/5667.py
reference_id OSVDB-44461;CVE-2008-1881
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/5667.py
fixed_packages
0
url pkg:deb/debian/vlc@0.8.6.e-2.1?distro=trixie
purl pkg:deb/debian/vlc@0.8.6.e-2.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@0.8.6.e-2.1%3Fdistro=trixie
1
url pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.21-0%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.21-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/vlc@3.0.23-3?distro=trixie
purl pkg:deb/debian/vlc@3.0.23-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@3.0.23-3%3Fdistro=trixie
aliases CVE-2008-1881
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ygt3-byr3-7qd7
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/vlc@0.8.6.e-2.1%3Fdistro=trixie