CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.

• CWE-119

• http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=5f63f1562d43f32331006c2c1a61742de031b84d
• http://secunia.com/advisories/32569Vendor Advisory
• http://secunia.com/advisories/33315Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200812-24.xml
• http://www.openwall.com/lists/oss-security/2008/11/05/4
• http://www.openwall.com/lists/oss-security/2008/11/05/5
• http://www.openwall.com/lists/oss-security/2008/11/10/13
• http://www.securityfocus.com/archive/1/498112/100/0/threaded
• http://www.securityfocus.com/bid/32125
• http://www.trapkit.de/advisories/TKADV2008-012.txtExploit
• http://www.videolan.org/security/sa0810.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46375
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14798
• http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=5f63f1562d43f32331006c2c1a61742de031b84d
• http://secunia.com/advisories/32569Vendor Advisory
• http://secunia.com/advisories/33315Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200812-24.xml
• http://www.openwall.com/lists/oss-security/2008/11/05/4
• http://www.openwall.com/lists/oss-security/2008/11/05/5
• http://www.openwall.com/lists/oss-security/2008/11/10/13
• http://www.securityfocus.com/archive/1/498112/100/0/threaded
• http://www.securityfocus.com/bid/32125
• http://www.trapkit.de/advisories/TKADV2008-012.txtExploit
• http://www.videolan.org/security/sa0810.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46375
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14798

Published

Nov 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5026Microsoft SharePoint uses URLs with the same hostname and po…
• CVE-2008-5027The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Mo…
• CVE-2008-5028Cross-site request forgery (CSRF) vulnerability in cmd.cgi i…
• CVE-2008-5029The __scm_destroy function in net/core/scm.c in the Linux ke…
• CVE-2008-5030Heap-based buffer overflow in the cddb_read_disc_data functi…
• CVE-2008-5031Multiple integer overflows in Python 2.2.3 through 2.5.1, an…
• CVE-2008-5033The chip_command function in drivers/media/video/tvaudio.c i…
• CVE-2008-5034master-filter in printfilters-ppd 2.13 allows local users to…
• CVE-2008-5035The Resource Monitoring and Control (RMC) daemon in IBM Hard…
• CVE-2008-5036Stack-based buffer overflow in VideoLAN VLC media player 0.9…
• CVE-2008-5037SQL injection vulnerability in view.php in ElkaGroup Image G…
• CVE-2008-5038Use-after-free vulnerability in the NetWare Core Protocol (N…9.8