CVE-2008-0984
NoneCVSS
—
EPSS
15.3%
Published
Feb 26, 2008
CISA due date
—
The record
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | vlc | 0 | 0.8.6.e-1 |
| Debian:11 | vlc | 0 | 0.8.6.e-1 |
| Debian:12 | vlc | 0 | 0.8.6.e-1 |
| Debian:13 | vlc | 0 | 0.8.6.e-1 |
| Debian:4.0 | vlc | 0 | 0.8.6-svn20061012.debian-5.1+etch2 |
| Debian:5.0 | vlc | 0 | 0.8.6.c-6+lenny1 |
Related vulnerabilities
- CVE-2023-47359 Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a… Also affects vlc
- CVE-2023-47360 Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an… Also affects vlc
- CVE-2022-41325 An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4… Also affects vlc
- CVE-2012-1775 Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote… Also affects vlc
- CVE-2011-0531 demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and… Also affects vlc
- CVE-2008-5036 Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow… Also affects vlc
- CVE-2008-5032 Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow… Also affects vlc
- CVE-2008-4654 Stack-based buffer overflow in the parse_master function in the Ty demux plugin… Also affects vlc