AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-5276

HIGH · CVSS 9.3 EPSS 7.84%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-12-03 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It may be remotely exploitable.

CVE
CVE-2008-5276
Severity
HIGH
CVSS
9.3
EPSS
7.84%

Original NVD Description

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.