CVE-2008-0984
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and...
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Exploit likelihood
What each source reports
NVD Score used
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
- Record
CVE-2008-0984- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
- Record
CVE-2008-0984- Updated
- 2026-11-02
EUVDEUVD-2008-0991 No score
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
- Record
EUVD-2008-0991- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g9w3-mq78-c86r No score
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and...
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
- Record
GHSA-g9w3-mq78-c86r- Updated
- 2026-11-02
OSV No score
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
- Record
CVE-2008-0984- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-0984 No score
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
- Record
DEBIAN-CVE-2008-0984- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vlcDebian:12 |
before 0.8.6.e-1 | 0.8.6.e-1 |
vlcDebian:13 |
before 0.8.6.e-1 | 0.8.6.e-1 |
vlcDebian:14 |
before 0.8.6.e-1 | 0.8.6.e-1 |
vlcDebian:4.0 From an advisory covering 8 CVEs |
before 0.8.6-svn20061012.debian-5.1+etch2, plus listed versions 0.8.6-svn20061012.debian-50.8.6-svn20061012.debian-5etch1 |
0.8.6-svn20061012.debian-5.1+etch2 |
vlcDebian:5.0 |
before 0.8.6.c-6+lenny1 | 0.8.6.c-6+lenny1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow | 2008-04-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0984 is a high vulnerability (CVSS 9.3) in Miro Player, published February 26, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.3%, the 96th percentile. Fixed in vlc 0.8.6.e-1.
References
secunia.com/advisories/29122
debian.org/security/2008/dsa-1543
videolan.org/security/sa0802.html
securityfocus.com/bid/28007
Show 10 moreShow less
securitytracker.com/id?1019510
lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html
vupen.com/english/advisories/2008/0682
coresecurity.com?action=item&id=2147
gentoo.org/security/en/glsa/glsa-200803-13.xml
nvd.nist.gov/vuln/detail/CVE-2008-0984
github.com/advisories/GHSA-g9w3-mq78-c86r
security-tracker.debian.org/tracker/CVE-2008-0984