CVE-2008-0984

NameCVE-2008-0984
DescriptionThe MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
SourceCVE (at NVD; LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-1543-1, DTSA-116-1
NVD severityhigh (attack range: remote)
Debian Bugs467652

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
vlc (PTS)wheezy (security), wheezy2.0.3-5+deb7u2fixed
jessie2.2.1-1~deb8u1fixed
jessie (security)2.2.0~rc2-2+deb8u1fixed
stretch2.2.2-6fixed
sid2.2.3-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
vlcsource(unstable)0.8.6.e-1medium467652
vlcsourceetch0.8.6-svn20061012.debian-5.1+etch2highDSA-1543-1
vlcsourcelenny0.8.6.c-6+lenny1highDTSA-116-1

Search for package or bug name: Reporting problems