Unscored severity · published Feb 26, 2008
CVE-2008-0984
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute…
–
CVSS
15.3%
EPSS
No
On KEV
Description
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MP
Miro Player · Miro
through 1.1 · source: NVD
VM
Vlc Media Player · Videolan
through 0.8.6d · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0984
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0984
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html
Vendor Advisory
http://secunia.com/advisories/29122
Vendor Advisory
http://secunia.com/advisories/29153
Vendor Advisory
http://secunia.com/advisories/29284
Vendor Advisory
http://secunia.com/advisories/29766
www.coresecurity.com
http://www.coresecurity.com/?action=item&id=2147