← Database

CVE-2008-4686

CRITICAL CVSS: 9.3 Published: 2008-10-22 Modified: 2026-06-16

Description

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Affected Platforms

Videolan Vlc Media Player

Weakness Type

CWE-189

References