CVE-2008-0984

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

Link	Resource
http://www.videolan.org/security/sa0802.html	Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html
http://www.coresecurity.com/?action=item&id=2147
http://www.securityfocus.com/bid/28007
http://www.securitytracker.com/id?1019510
http://secunia.com/advisories/29122	Vendor Advisory
http://secunia.com/advisories/29153	Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
http://secunia.com/advisories/29284	Vendor Advisory
http://www.debian.org/security/2008/dsa-1543
http://secunia.com/advisories/29766	Vendor Advisory
http://www.vupen.com/english/advisories/2008/0682	Vendor Advisory
http://www.securityfocus.com/archive/1/488841/100/0/threaded

Configuration 1

cpe:2.3:a:miro:miro_player:*:*:*:*:*:*:*:* cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*

---

Published : 2008-02-26 07:44

Updated : 2018-10-15 10:04

---

NVD link : CVE-2008-0984

Mitre link : CVE-2008-0984

No products.

CWE-399