CVE-2007-6681: Videolan Vlc

High severity, CVSS 7.5. EPSS: 17.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file.

Affected products

• Videolan Vlc: up to and including 0.8.6d

Published 2008-01-17. Last modified 2026-06-16.