CVE-2008-4686 in VLC Media Player

Summary

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 10/22/2008
• Disclosure: 10/22/2008
• Moderation: VulDB entry created
• Entries: VDB-44657 (1)
• CPE: ready
• CWE: CWE-189 (Confirmed)
• CVSS: 10.0
• EPSS: 0.08258
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-4686
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4686
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-4686/