CVE-2008-4558: videolan vlc_media_player Resource Management Errors

EPSS trend

Probability

8.49%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.49% on 21-09-2026

21-09-202621-10-2026

EPSS score

8.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (coresecurity.com)
Maturity: unknown
exploit-databasedoswindowsVerified
VideoLAN VLC Media Player 0.9.2 Media Player - XSPF Memory Corruption
Maturity: poc

References

9 links

www.securityfocus.com/bid/31758VDB EntryX Refsource BID
www.exploit-db.com/exploits/6756ExploitX Refsource EXPLOIT DB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14726VDB EntrySignatureX Refsource OVAL
www.coresecurity.com/content/vlc-xspf-memory-corruptionX Refsource MISCExploit
secunia.com/advisories/32267Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/2826VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/45869VDB EntryX Refsource XF
www.securityfocus.com/archive/1/497354/100/0/threadedMailing ListX Refsource BUGTRAQ
security-tracker.debian.org/tracker/CVE-2008-4558Advisory

Related vulnerabilities

CVE-2018-11516debianvlc+13.68%8y ago28-05-2018 16:00The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.CVE-2013-1954debianvlc+16.07%13y ago10-07-2013 19:00The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.CVE-2013-1868debianvlc+110.98%13y ago10-07-2013 19:00Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.CVE-2013-4388debianvlc+83.78%13y ago11-10-2013 22:00Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.CVE-2013-7340debianvlc+11.64%12y ago20-03-2014 19:00VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.CVE-2013-6934live555streaming_media+128.17%12y ago23-01-2014 21:00The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.

All vulnerabilities invlc_media_player

CVE-2008-4558: videolan vlc_media_player Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References