CVE-2008-2147

Published: May 12, 2008Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory.

Affected (24)

Products: Videolan: Vlc

Videolan

1 product

Vlc

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Videolan Vlc	Up to 0.8.6
Videolan Vlc	Version 0.4.6
Videolan Vlc	Version 0.5.0
Videolan Vlc	Version 0.5.1
Videolan Vlc	Version 0.5.1a
Videolan Vlc	Version 0.5.2
Videolan Vlc	Version 0.5.3
Videolan Vlc	Version 0.6.0
Videolan Vlc	Version 0.6.1
Videolan Vlc	Version 0.6.2
Videolan Vlc	Version 0.7.0
Videolan Vlc	Version 0.7.1
Videolan Vlc	Version 0.7.2
Videolan Vlc	Version 0.8.0
Videolan Vlc	Version 0.8.1
Videolan Vlc	Version 0.8.2
Videolan Vlc	Version 0.8.4
Videolan Vlc	Version 0.8.4a
Videolan Vlc	Version 0.8.5
Videolan Vlc	Version 0.8.6a
Videolan Vlc	Version 0.8.6b
Videolan Vlc	Version 0.8.6c
Videolan Vlc	Version 0.8.6d
Videolan Vlc	Version 0.8.6e