CVE-2008-0984

CRITICAL 9.3CVE-2008-0984 · Published 26/02/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
miro player miro	`≤ 1.1`	No fix yet
vlc media player videolan	`≤ 0.8.6d`	No fix yet

Description

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

References

lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html
secunia.com/advisories/29122 · Vendor Advisory
secunia.com/advisories/29153 · Vendor Advisory
secunia.com/advisories/29284 · Vendor Advisory
secunia.com/advisories/29766 · Vendor Advisory
coresecurity.com
debian.org/security/2008/dsa-1543
gentoo.org/security/en/glsa/glsa-200803-13.xml
securityfocus.com/archive/1/488841/100/0/threaded
securityfocus.com/bid/28007
securitytracker.com/id
videolan.org/security/sa0802.html · Patch
vupen.com/english/advisories/2008/0682 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free