CVE-2007-6684

Published: Jan 17, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, which triggers a NULL pointer dereference.

Affected (1)

Products: Videolan: Vlc

Videolan

1 product

Vlc

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Videolan Vlc	Version 0.8.6d

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://mailman.videolan.org/pipermail/vlc-devel/2007-September/034722.html

Source: cve@mitre.org

http://secunia.com/advisories/29284

Source: cve@mitre.org

http://trac.videolan.org/vlc/changeset/22023

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14876

Source: cve@mitre.org

http://mailman.videolan.org/pipermail/vlc-devel/2007-September/034722.html