CVE-2008-4654 - Secunia.com

CVE Reference: CVE-2008-4654
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-4654

Description: Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/45960 SREASON http://securityreason.com/securityalert/4460 SAID Secunia Advisory: SA32339 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14803 MLIST http://www.openwall.com/lists/oss-security/2008/10/19/2 MISC http://www.trapkit.de/advisories/TKADV2008-010.txt CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502726 http://www.videolan.org/security/sa0809.html http://git.videolan.org/?p=vlc.git;a=commitdiff;h=26d92b87bba99b5ea2e17b7eaa39c462d65e9133 http://git.videolan.org/?p=vlc.git;a=commit;h=fde9e1cc1fe1ec9635169fa071e42b3aa6436033 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/497587/100/0/threaded BID 31813

Return to the previous page.

Secunia