VDB
DEBIAN-CVE-2008-4686
DEBIAN-CVE-2008-4686
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | vlc | 0, 0, 0 |
| Debian:11 | vlc | 0, 0, 0 |
| Debian:13 | vlc | 0, 0, 0 |
| Debian:14 | vlc | 0, 0, 0 |
Timeline
- Oct 22, 2008 CVE Published
- Apr 28, 2026 CVE Updated