Debian/vlc: unknown

Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box

Action: Upgrade vlc to 0.8.6.e-1.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1489#Debian:13/vlc
• https://security-tracker.debian.org/tracker/CVE-2008-1489

published 2008-03-25T00:44:00Z · modified 2026-10-23T17:47:35.878272594Z · JSON