9.3

CVE-2008-4686

EPSS 9.94%
Veröffentlicht 22.10.2008 18:00:01
Zuletzt bearbeitet 16.06.2026 22:58:18
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Videolan ≫ Vlc Media Player Version0.9.0

Videolan ≫ Vlc Media Player Version0.9.1

Videolan ≫ Vlc Media Player Version0.9.2

Videolan ≫ Vlc Media Player Version0.9.3

Videolan ≫ Vlc Media Player Version0.9.4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	9.94%	0.95

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.openwall.com/lists/oss-security/2008/10/19/2

http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3

http://www.openwall.com/lists/oss-security/2008/10/22/6

http://www.securityfocus.com/bid/31867

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630

https://nvd.nist.gov/vuln/detail/CVE-2008-4686

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4686

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4686

EUVD