CVE-2008-4558: Medium severity vlc media player vulnerability
Published Oct 14, 2008
·Updated
Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.
Affected Software
1 affected component
Videolan VLC Media Player=0.9.2
Event History
Oct 14, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-4558?
CVE-2008-4558 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2008-4558?
To fix CVE-2008-4558, upgrade VLC media player to a version later than 0.9.2 where the vulnerability is patched.
3
What type of attack does CVE-2008-4558 enable?
CVE-2008-4558 enables remote attackers to overwrite arbitrary memory, potentially allowing for arbitrary code execution.
4
Which version of VLC is affected by CVE-2008-4558?
VLC media player version 0.9.2 is affected by CVE-2008-4558.
5
Is there a workaround for CVE-2008-4558 if I cannot update VLC?
There are no known effective workarounds for CVE-2008-4558, and updating VLC is the recommended solution.