CVE-2008-4686

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

9.94%

Published

Oct 22, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBVideoLAN VLC Media Player 0.9.4 - '.ty' Local Buffer Overflow (SEH)Exploit-DBVideoLAN VLC Media Player 0.9.4 - '.TY' Local Stack Buffer Overflow

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Weaknesses (CWE)

CWE-189

Affected Products (5)

videolan · vlc_media_playervulnerable

References (10)

http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3

http://www.openwall.com/lists/oss-security/2008/10/19/2

http://www.openwall.com/lists/oss-security/2008/10/22/6

http://www.securityfocus.com/bid/31867

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630

http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3

http://www.openwall.com/lists/oss-security/2008/10/19/2

http://www.openwall.com/lists/oss-security/2008/10/22/6

http://www.securityfocus.com/bid/31867

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630

KEV Catalog EPSS Scores Vendors All CVEs