9.3
CVSSv2

CVE-2008-0984

Published: 26/02/2008 Updated: 15/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and previous versions, as used in Miro Player 1.1 and previous versions, allows remote malicious users to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

Vulnerable Product Search on Vulmon Subscribe to Product

miro miro player

videolan vlc media player

Vendor Advisories

Debian Bug report logs - #472635 vlc CVE-2008-1489: integer overflow leading to heap overflow Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Tue, 25 Mar 2008 13:27:0 ...
Debian Bug report logs - #467652 vlc: CVE-2008-0984 arbitrary code execution via crafted mp4 file Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Axel Beckert <beckert@physethzch> Date: Tue, 26 Feb 2 ...

Exploits

#!/usr/bin/python # # Kantaris 034 Media Player Local Buffer Overflow [0day!] # # The following exploit will make a filmssa file, # just rename the file with the name of your movie, and use your imagination # to pwn! :) # Shellcode is local bind shell, just telnet to port:4444 to get command prompt :) # # BIG thanks to muts <muts[at]offensi ...
Core Security Technologies Advisory - The VideoLAN (VLC) media player package is vulnerable to an arbitrary memory corruption vulnerability, which can be exploited by malicious remote attackers to compromise a user's system VLC versions 086d and below and Miro Player versions 11 and below are vulnerable Proof of concept code included ...