Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-4558
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-4558

Description:
Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/45869

SAID
  Secunia Advisory: SA32267

MISC
  http://www.coresecurity.com/content/vlc-xspf-memory-corruption

BID
  31758


Return to the previous page.