CVE-2008-4686

Description

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Affected products

• VideoLAN / VLC media player0.9.0 – 0.9.0
• VideoLAN / VLC media player0.9.1 – 0.9.1
• VideoLAN / VLC media player0.9.2 – 0.9.2
• VideoLAN / VLC media player0.9.3 – 0.9.3
• VideoLAN / VLC media player0.9.4 – 0.9.4

Exploits & proofs of concept

• exploit-dbVideoLAN VLC Media Player 0.9.4 - '.ty' Local Buffer Overflow (SEH)by Guido Landi
• exploit-dbVideoLAN VLC Media Player 0.9.4 - '.TY' Local Stack Buffer Overflowby Guido Landi

References

• MAILING_LISThttp://www.openwall.com/lists/oss-security/2008/10/22/6
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14630
• MISChttp://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=d859e6b9537af2d7326276f70de25a840f554dc3
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2008/10/19/2
• MISChttp://www.securityfocus.com/bid/31867