4.6
CVSSv2

CVE-2008-2147

Published: 12/05/2008 Updated: 07/11/2023
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Untrusted search path vulnerability in VideoLAN VLC prior to 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory.

Vulnerable Product Search on Vulmon Subscribe to Product

videolan vlc 0.8.0

videolan vlc 0.8.5

videolan vlc 0.7.0

videolan vlc 0.4.6

videolan vlc 0.8.4

videolan vlc 0.8.6b

videolan vlc 0.5.3

videolan vlc 0.6.0

videolan vlc 0.8.6c

videolan vlc 0.7.1

videolan vlc 0.6.1

videolan vlc 0.6.2

videolan vlc 0.5.2

videolan vlc 0.5.1a

videolan vlc 0.8.1

videolan vlc 0.8.6d

videolan vlc 0.5.0

videolan vlc 0.8.6e

videolan vlc 0.5.1

videolan vlc 0.7.2

videolan vlc

videolan vlc 0.8.2

videolan vlc 0.8.4a

videolan vlc 0.8.6a

Vendor Advisories

Debian Bug report logs - #480724 vlc: CVE-2008-2147 untrusted search path vulnerability for module library Package: vlc; Maintainer for vlc is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for vlc is src:vlc (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Sun, 11 May ...
Several vulnerabilities have been discovered in vlc, a multimedia player and streamer The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1768 Drew Yao discovered that multiple integer overflows in the MP4 demuxer, Real demuxer and Cinepak codec can lead to the execution of arbitrary code CVE-2008-1769 Dr ...