Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-uykr-jsdk-4qb1
Vulnerability ID VCID-uykr-jsdk-4qb1
Aliases CVE-2008-3794
Summary Two vulnerabilities in VLC may lead to the remote execution of arbitrary code.
Status Published
Exploitability 2.0
Weighted Severity 6.1
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-189 Numeric Errors
System Score Found at
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
epss 0.09199 https://api.first.org/data/v1/epss?cve=CVE-2008-3794
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2008-3794
Reference id Reference type URL
http://mailman.videolan.org/pipermail/vlc-devel/2008-August/048488.html
https://api.first.org/data/v1/epss?cve=CVE-2008-3794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3794
http://security.gentoo.org/glsa/glsa-200809-06.xml
http://securityreason.com/securityalert/4190
https://exchange.xforce.ibmcloud.com/vulnerabilities/44659
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14531
https://www.exploit-db.com/exploits/6293
http://www.openwall.com/lists/oss-security/2008/08/24/3
http://www.orange-bat.com/adv/2008/adv.08.24.txt
http://www.securityfocus.com/bid/30806
http://www.securitytracker.com/id?1020759
496265 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496265
cpe:2.3:a:videolan:vlc_media_player:0.8.6i:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:videolan:vlc_media_player:0.8.6i:*:*:*:*:*:*:*
CVE-2008-3794 https://nvd.nist.gov/vuln/detail/CVE-2008-3794
GLSA-200809-06 https://security.gentoo.org/glsa/200809-06
OSVDB-47836;CVE-2008-3794 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/6293.txt
Data source Exploit-DB
Date added Aug. 22, 2008
Description VideoLAN VLC Media Player 0.8.6i - Mms Protocol Handling Heap Overflow (PoC)
Ransomware campaign use Known
Source publication date Aug. 23, 2008
Exploit type dos
Platform multiple
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2008-3794
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.92674
EPSS Score 0.09199
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:16.881124+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200809-06 38.0.0