CVE-2008-4654
Videolan Vlc Media Player - Memory Corruption
Title source: ruleDescription
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
Exploits (8)
nomisec
WORKING POC
2 stars
by KernelErr · poc
https://github.com/KernelErr/VLC-CVE-2008-4654-Exploit
metasploit
WORKING POC
GOOD
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/videolan_tivo.rb
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16629
References (13)
Scores
EPSS
0.7462
EPSS Percentile
98.8%
Classification
CWE
CWE-119
Status
draft
Affected Products (5)
videolan/vlc_media_player
videolan/vlc_media_player
videolan/vlc_media_player
videolan/vlc_media_player
videolan/vlc_media_player
Timeline
Published
Oct 22, 2008
Tracked Since
Feb 18, 2026