CVE-2008-4686

Publication date 22 October 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

Status

Package Ubuntu Release Status
vlc 9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Fixed 0.9.4-1ubuntu3.2
8.04 LTS hardy
Not affected
7.10 gutsy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
vlc