CVE

Id
34803  
CVE No.
CVE-2008-4686  
Status
Candidate  
Description
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381092 34803 CVE-2008-4686 MLIST:[oss-security] 20081019 CVE id request: vlc  View
381093 34803 CVE-2008-4686 URL:http://www.openwall.com/lists/oss-security/2008/10/19/2  View
381094 34803 CVE-2008-4686 MLIST:[oss-security] 20081022 Re: CVE id request: vlc  View
381095 34803 CVE-2008-4686 URL:http://www.openwall.com/lists/oss-security/2008/10/22/6  View
381096 34803 CVE-2008-4686 CONFIRM:http://git.videolan.org/?p=vlc.git;a=commitdiff;h=d859e6b9537af2d7326276f70de25a840f554dc3  View
381097 34803 CVE-2008-4686 BID:31867  View
381098 34803 CVE-2008-4686 URL:http://www.securityfocus.com/bid/31867  View
381099 34803 CVE-2008-4686 OVAL:oval:org.mitre.oval:def:14630  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46587 JVNDB-2008-001897 Lynx における lynxcgi: URL の処理に関する任意のコードを実行される脆弱性 lynx には、アドバンスモードを使用し、URL ハンドラとして lynx を設定している場合、lynxcgi: URL の処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-4690 34803 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001897.html  View