Search for vulnerabilities
Vulnerability details: VCID-ghhr-d5qs-aaaj
Vulnerability ID VCID-ghhr-d5qs-aaaj
Aliases CVE-2008-2430
Summary Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.
Status Published
Exploitability 0.5
Weighted Severity 8.4
Risk 4.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-189 Numeric Errors
System Score Found at
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.0843 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.10964 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.16171 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.16171 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.16246 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.16246 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.16246 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.16246 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
epss 0.20642 https://api.first.org/data/v1/epss?cve=CVE-2008-2430
cvssv2 9.3 https://nvd.nist.gov/vuln/detail/CVE-2008-2430
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2008-2430
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2430
http://secunia.com/advisories/30601
http://secunia.com/advisories/31317
http://secunia.com/secunia_research/2008-29/advisory/
http://security.gentoo.org/glsa/glsa-200807-13.xml
http://securityreason.com/securityalert/3976
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14344
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14769
http://www.securityfocus.com/archive/1/493849/100/0/threaded
http://www.securityfocus.com/bid/30058
http://www.securitytracker.com/id?1020429
http://www.videolan.org/developers/vlc/NEWS
http://www.vupen.com/english/advisories/2008/1995/references
489004 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489004
CVE-2008-2430 https://nvd.nist.gov/vuln/detail/CVE-2008-2430
GLSA-200807-13 https://security.gentoo.org/glsa/200807-13
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2008-2430
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.91514
EPSS Score 0.0843
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.