NVD

Id
4468  
Name
CVE-2008-4654  
Description
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-21  
Modified Date
2012-01-27  
Seq
2008-4654  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28122 4468 CVE-2008-4654 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502726  View
28123 4468 CVE-2008-4654 http://git.videolan.org/?p=vlc.git;a=commit;h=fde9e1cc1fe1ec9635169fa071e42b3aa6436033  View
28124 4468 CVE-2008-4654 http://git.videolan.org/?p=vlc.git;a=commitdiff;h=26d92b87bba99b5ea2e17b7eaa39c462d65e9133  View
28125 4468 CVE-2008-4654 oval:org.mitre.oval:def:14803  View
28126 4468 CVE-2008-4654 4460  View
28127 4468 CVE-2008-4654 [oss-security] 20081019 CVE id request: vlc  View
28128 4468 CVE-2008-4654 20081020 [TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability  View
28129 4468 CVE-2008-4654 31813  View
28130 4468 CVE-2008-4654 http://www.trapkit.de/advisories/TKADV2008-010.txt  View
28131 4468 CVE-2008-4654 http://www.videolan.org/security/sa0809.html  View
28132 4468 CVE-2008-4654 ADV-2008-2856  View
28133 4468 CVE-2008-4654 vlcmediaplayer-ty-bo(45960)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51024 JVNDB-2008-006334 VLC Media Player の Ty demux プラグインにおけるスタックベースのバッファオーバーフローの脆弱性 VLC Media Player の Ty demux プラグイン (modules/demux/ty.c) の parse_master 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-4654 34767 CVE-2008-4654 4468 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006334.html 2008-10-21 2012-12-20 View