Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ph4f-3u7p-f3d8
Vulnerability ID VCID-ph4f-3u7p-f3d8
Aliases CVE-2007-3467
Summary Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a WAV file with a large sample rate.
Status Published
Exploitability 0.5
Weighted Severity 7.0
Risk 3.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
epss 0.0103 https://api.first.org/data/v1/epss?cve=CVE-2007-3467
cvssv2 7.8 https://nvd.nist.gov/vuln/detail/CVE-2007-3467
Reference id Reference type URL
http://osvdb.org/42189
https://api.first.org/data/v1/epss?cve=CVE-2007-3467
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3467
http://secunia.com/advisories/25980
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14863
http://www.debian.org/security/2007/dsa-1332
http://www.isecpartners.com/advisories/2007-001-vlc.txt
http://www.securityfocus.com/archive/1/471933/100/0/threaded
429726 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=429726
cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*
CVE-2007-3467 https://nvd.nist.gov/vuln/detail/CVE-2007-3467
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-3467
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.77258
EPSS Score 0.0103
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:30:19.938452+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0