CVEvulnerability
CVE-2008-0984
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Affected configurations
• miro miro player (<= 1.1)
• videolan vlc media player (<= 0.8.6d)
Related
Weakness · not in database (1)
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html lists.grok.org.uk
- http://secunia.com/advisories/29122 Vendor Advisory
- http://secunia.com/advisories/29153 Vendor Advisory
- http://secunia.com/advisories/29284 Vendor Advisory
- http://secunia.com/advisories/29766 Vendor Advisory
- http://www.coresecurity.com/?action=item&id=2147 www.coresecurity.com
- http://www.debian.org/security/2008/dsa-1543 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml www.gentoo.org
- http://www.securityfocus.com/archive/1/488841/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28007 www.securityfocus.com
- http://www.securitytracker.com/id?1019510 www.securitytracker.com
- http://www.videolan.org/security/sa0802.html Patch
- http://www.vupen.com/english/advisories/2008/0682 Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html lists.grok.org.uk
- http://secunia.com/advisories/29122 Vendor Advisory
- http://secunia.com/advisories/29153 Vendor Advisory
- http://secunia.com/advisories/29284 Vendor Advisory
- http://secunia.com/advisories/29766 Vendor Advisory
- http://www.coresecurity.com/?action=item&id=2147 www.coresecurity.com
- http://www.debian.org/security/2008/dsa-1543 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml www.gentoo.org
- http://www.securityfocus.com/archive/1/488841/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28007 www.securityfocus.com
- http://www.securitytracker.com/id?1019510 www.securitytracker.com
- http://www.videolan.org/security/sa0802.html Patch
- http://www.vupen.com/english/advisories/2008/0682 Vendor Advisory