CVE-2008-2147
CVE-2008-2147
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory.
EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/31317
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42377
- http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=c7cef4fdd8dd72ce0a45be3cda8ba98df5e83181
- http://trac.videolan.org/vlc/ticket/1578
- http://security.gentoo.org/glsa/glsa-200807-13.xml
- https://nvd.nist.gov/vuln/detail/CVE-2008-2147