CVE-2008-0984

Published: Feb 26, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

Affected (2)

Products: Miro: Miro Player · Videolan: Vlc Media Player

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Miro Miro Player	Up to 1.1
Videolan Vlc Media Player	Up to 0.8.6d

Related CWEs

CWE-399

References (26)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html

Source: cve@mitre.org

http://secunia.com/advisories/29122

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29153

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29284

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29766

Source: cve@mitre.org

Vendor Advisory

http://www.coresecurity.com/?action=item&id=2147

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1543

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/488841/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/28007

Source: cve@mitre.org

http://www.securitytracker.com/id?1019510

Source: cve@mitre.org

http://www.videolan.org/security/sa0802.html

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2008/0682

Source: cve@mitre.org

Vendor Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html