CVE-2008-4686

Fixed in a distro release EPSS 10%

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Published 2008-10-22 · CVE record · OSV

Products: videolan vlc_media_player

Distro releases