{"uuid": "aa0d7866-bfd7-48a6-8556-fce43d578bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-5036", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vlc_realtext.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Tobias Klein\", \"SkD\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow vulnerability in\\n          VideoLAN VLC < 0.9.6. The vulnerability exists in the parsing of\\n          RealText subtitle files.\\n\\n          In order to exploit this, this module will generate two files:\\n          The .mp4 file is used to trick your victim into running. The .rt file\\n          is the actual malicious file that triggers the vulnerability, which\\n          should be placed under the same directory as the .mp4 file.\", \"disclosure_date\": \"2008-11-05\", \"fullname\": \"exploit/windows/fileformat/vlc_realtext\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"VLC Media Player RealText Subtitle Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/vlc_realtext.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/fileformat/vlc_realtext\", \"references\": [\"OSVDB-49809\", \"CVE-2008-5036\", \"BID-32125\", \"URL-http://www.trapkit.de/advisories/TKADV2008-011.txt\", \"URL-http://www.videolan.org/security/sa0810.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"VLC 0.9.4 on Windows XP SP3 / Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:33.320629Z"}