CVE-2008-4654 Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiV...
HighCVSS 9.3
EPSS 57.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.9 | No fix listed |
| videolan vlc media player | = 0.9.1 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| debian/vlc(Debian:12) | < 1.0.3-1 | 1.0.3-1 |
| debian/vlc(Debian:13) | < 1.0.3-1 | 1.0.3-1 |
| debian/vlc(Debian:14) | < 1.0.3-1 | 1.0.3-1 |
References
- Debian Security Tracker CVE-2008-4654 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org
- git.videolan.org
- git.videolan.org
- 32339 third-party-advisory vendor-advisory
- 4460 third-party-advisory
- [oss-security] 20081019 CVE id request: vlc mailing-list
- 20081020 [TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability mailing-list
- 31813 vdb-entry
- www.trapkit.de exploit
- www.videolan.org vendor-advisory
- ADV-2008-2856 vdb-entry
- vlcmediaplayer-ty-bo(45960) vdb-entry
- oval:org.mitre.oval:def:14803 signature vdb-entry