9.3

CVE-2008-4686

EPSS 7.75%
Veröffentlicht 22.10.2008 18:00:01
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Videolan ≫ Vlc Media Player Version0.9.0

Videolan ≫ Vlc Media Player Version0.9.1

Videolan ≫ Vlc Media Player Version0.9.2

Videolan ≫ Vlc Media Player Version0.9.3

Videolan ≫ Vlc Media Player Version0.9.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.75%	0.916

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.openwall.com/lists/oss-security/2008/10/19/2

http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3

http://www.openwall.com/lists/oss-security/2008/10/22/6

http://www.securityfocus.com/bid/31867

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630

https://nvd.nist.gov/vuln/detail/CVE-2008-4686

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4686

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4686

EUVD