← Database

CVE-2008-4558

MEDIUM CVSS: 6.8 Published: 2008-10-15 Modified: 2026-06-16

Description

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.

Affected Platforms

Videolan Vlc Media Player

Weakness Type

CWE-399

References