CVE-2008-0984
HIGH severity · CVSS 9.3 · CWE-399
9.3CVSS HIGH
Summary
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)15%
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://secunia.com/advisories/29122Advisory
- http://secunia.com/advisories/29153Advisory
- http://secunia.com/advisories/29284Advisory
- http://secunia.com/advisories/29766Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html
- http://www.coresecurity.com/?action=item&id=2147
- http://www.debian.org/security/2008/dsa-1543
- http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml