CVE-2008-4654
Videolan Vlc Media Player - Memory Corruption
Title source: ruleDescription
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.
Exploits (8)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16629
nomisec
WORKING POC
2 stars
by KernelErr · poc
https://github.com/KernelErr/VLC-CVE-2008-4654-Exploit
metasploit
WORKING POC
GOOD
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/videolan_tivo.rb
References (13)
Scores
EPSS
0.8213
EPSS Percentile
99.2%
Details
CWE
CWE-119
Status
published
Products (5)
videolan/vlc_media_player
0.9
videolan/vlc_media_player
0.9.1
videolan/vlc_media_player
0.9.2
videolan/vlc_media_player
0.9.3
videolan/vlc_media_player
0.9.4
Published
Oct 22, 2008
Tracked Since
Feb 18, 2026