CVE - CVE-2008-1489

CVE-ID
CVE-2008-1489	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:28433 URL:http://www.securityfocus.com/bid/28433 CONFIRM:http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a CONFIRM:http://wiki.videolan.org/Changelog/0.8.6f CONFIRM:http://www.videolan.org/security/sa0803.php DEBIAN:DSA-1543 URL:http://www.debian.org/security/2008/dsa-1543 GENTOO:GLSA-200804-25 URL:http://security.gentoo.org/glsa/glsa-200804-25.xml OVAL:oval:org.mitre.oval:def:14841 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14841 SECUNIA:29503 URL:http://secunia.com/advisories/29503 SECUNIA:29766 URL:http://secunia.com/advisories/29766 SECUNIA:29800 URL:http://secunia.com/advisories/29800 VUPEN:ADV-2008-0985 URL:~~http://www.vupen.com/english/advisories/2008/0985~~ (Obsolete source) XF:vlcmediaplayer-mp4readbox-rdrf-bo(41412) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/41412
Assigning CNA
MITRE Corporation
Date Record Created
20080324	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20080324)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)