9.3

CVE-2008-0984

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Miro ≫ Miro Player Version <= 1.1
Videolan ≫ Vlc Media Player Version <= 0.8.6d
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.28% 0.963
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/29284
Vendor Advisory
http://secunia.com/advisories/29766
Vendor Advisory
http://www.debian.org/security/2008/dsa-1543
http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html
http://secunia.com/advisories/29122
Vendor Advisory
http://secunia.com/advisories/29153
Vendor Advisory
http://www.coresecurity.com/?action=item&id=2147
http://www.securityfocus.com/archive/1/488841/100/0/threaded
http://www.securityfocus.com/bid/28007
http://www.securitytracker.com/id?1019510
http://www.videolan.org/security/sa0802.html
Patch
http://www.vupen.com/english/advisories/2008/0682
Vendor Advisory