CVE-2008-4686
CVE-2008-4686
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.
EPSS 9.9% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2008/10/22/6
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630
- http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3
- http://www.openwall.com/lists/oss-security/2008/10/19/2
- http://www.securityfocus.com/bid/31867
- https://nvd.nist.gov/vuln/detail/CVE-2008-4686