DEBIAN-CVE-2008-0984

DEBIAN-CVE-2008-0984 PUBLISHED CVSS 9.300000190734863 CRITICAL

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

Risk Scores

CVSS v4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:13	vlc	0, 0, 0
Debian:11	vlc	0, 0, 0
Debian:12	vlc	0, 0, 0
Debian:14	vlc	0, 0, 0

Timeline

Feb 26, 2008 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2008-0984 advisory

Open in Interactive Console →