Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2008-1489 — Improper Restriction of Operations within the Bounds of a Memory Buffer in VLC
6 documents6 sources
Severity
6.8MEDIUMNVD
CNA9.3OSV9.3
EPSS
33.2%
top 3.09%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedMar 25
Latest updateMay 1
Description
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages2 packages
🔴Vulnerability Details
3💥Exploits & PoCs
1📋Vendor Advisories
1Debianâ–¶
CVE-2008-1489: vlc - Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e all...↗2008