CVE-2008-2430

Name of the Vulnerable Software and Affected Versions VLC Media Player version 0.8.6h

Description The issue is related to an integer overflow in the Open function in modules/demux/wav.c, which can be exploited by remote attackers to execute arbitrary code via a large fmt chunk in a WAV file. This is due to errors in number processing.

Recommendations For VLC Media Player version 0.8.6h, update to a newer version to mitigate the risk of exploitation. As a temporary workaround, consider avoiding the use of the Open function in modules/demux/wav.c when handling WAV files until a patch is available. Restrict access to WAV files to minimize the risk of exploitation.