Debian/vlc: unknown

Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

Action: Upgrade vlc to 0.8.6.e-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-0073
• https://security-tracker.debian.org/tracker/CVE-2008-0073

published 2008-03-24T22:44:00Z · modified 2026-10-23T17:47:45.263432809Z · JSON