CVEvulnerability
CVE-2008-4686
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.
Affected configurations
• videolan vlc media player 0.9.0
• videolan vlc media player 0.9.1
• videolan vlc media player 0.9.2
• videolan vlc media player 0.9.3
• videolan vlc media player 0.9.4
Related
Weakness · not in database (1)
References
- http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3 git.videolan.org
- http://www.openwall.com/lists/oss-security/2008/10/19/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/10/22/6 www.openwall.com
- http://www.securityfocus.com/bid/31867 www.securityfocus.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630 oval.cisecurity.org
- http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3 git.videolan.org
- http://www.openwall.com/lists/oss-security/2008/10/19/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/10/22/6 www.openwall.com
- http://www.securityfocus.com/bid/31867 www.securityfocus.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630 oval.cisecurity.org