{"api_version":"1","generated_at":"2026-07-23T13:35:55+00:00","cve":"CVE-2008-0984","urls":{"html":"https://cve.report/CVE-2008-0984","api":"https://cve.report/api/cve/CVE-2008-0984.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0984","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0984"},"summary":{"title":"CVE-2008-0984","description":"The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-02-26 19:44:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/bid/28007","name":"http://www.securityfocus.com/bid/28007","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VideoLAN VLC Media Player MP4 Demuxer Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/29153","name":"http://secunia.com/advisories/29153","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Miro MP4 Demuxer Arbitrary Memory Overwrite - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.videolan.org/security/sa0802.html","name":"http://www.videolan.org/security/sa0802.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"VideoLAN Security Advisory 0802","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","name":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VLC: Multiple vulnerabilities — Gentoo Linux Documentation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/488841/100/0/threaded","name":"http://www.securityfocus.com/archive/1/488841/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.coresecurity.com/?action=item&id=2147","name":"http://www.coresecurity.com/?action=item&id=2147","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Core Security | Cyber Threat Prevention & Identity Governance","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://secunia.com/advisories/29122","name":"http://secunia.com/advisories/29122","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VLC Media Player MP4 Demuxer Arbitrary Memory Overwrite - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/0682","name":"http://www.vupen.com/english/advisories/2008/0682","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2008/dsa-1543","name":"http://www.debian.org/security/2008/dsa-1543","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1543-1 vlc","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html","name":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[Full-disclosure] [ MDVSA-2008:052 ] - Updated cacti packages fix multiple vulnerabilities","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/29284","name":"http://secunia.com/advisories/29284","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Gentoo update for vlc - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1019510","name":"http://www.securitytracker.com/id?1019510","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VLC Media Player MPEG-4 Demuxer Memory Corruption Flaw Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/29766","name":"http://secunia.com/advisories/29766","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for vlc - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0984","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0984","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"984","vulnerable":"1","versionEndIncluding":"1.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"miro","cpe5":"miro_player","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"984","vulnerable":"1","versionEndIncluding":"0.8.6d","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"videolan","cpe5":"vlc_media_player","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:01:40.120Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"29122","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29122"},{"name":"29284","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29284"},{"name":"DSA-1543","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2008/dsa-1543"},{"name":"29153","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29153"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.videolan.org/security/sa0802.html"},{"name":"28007","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/28007"},{"name":"1019510","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1019510"},{"name":"20080227 CORE-2008-0130: VLC media player chunk context validation error","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html"},{"name":"20080227 CORE-2008-0130: VLC media player chunk context validation error","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/488841/100/0/threaded"},{"name":"29766","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29766"},{"name":"ADV-2008-0682","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/0682"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.coresecurity.com/?action=item&id=2147"},{"name":"GLSA-200803-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-02-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"29122","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29122"},{"name":"29284","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29284"},{"name":"DSA-1543","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2008/dsa-1543"},{"name":"29153","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29153"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.videolan.org/security/sa0802.html"},{"name":"28007","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/28007"},{"name":"1019510","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1019510"},{"name":"20080227 CORE-2008-0130: VLC media player chunk context validation error","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html"},{"name":"20080227 CORE-2008-0130: VLC media player chunk context validation error","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/488841/100/0/threaded"},{"name":"29766","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29766"},{"name":"ADV-2008-0682","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/0682"},{"tags":["x_refsource_MISC"],"url":"http://www.coresecurity.com/?action=item&id=2147"},{"name":"GLSA-200803-13","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-0984","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"29122","refsource":"SECUNIA","url":"http://secunia.com/advisories/29122"},{"name":"29284","refsource":"SECUNIA","url":"http://secunia.com/advisories/29284"},{"name":"DSA-1543","refsource":"DEBIAN","url":"http://www.debian.org/security/2008/dsa-1543"},{"name":"29153","refsource":"SECUNIA","url":"http://secunia.com/advisories/29153"},{"name":"http://www.videolan.org/security/sa0802.html","refsource":"CONFIRM","url":"http://www.videolan.org/security/sa0802.html"},{"name":"28007","refsource":"BID","url":"http://www.securityfocus.com/bid/28007"},{"name":"1019510","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1019510"},{"name":"20080227 CORE-2008-0130: VLC media player chunk context validation error","refsource":"FULLDISC","url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html"},{"name":"20080227 CORE-2008-0130: VLC media player chunk context validation error","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/488841/100/0/threaded"},{"name":"29766","refsource":"SECUNIA","url":"http://secunia.com/advisories/29766"},{"name":"ADV-2008-0682","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/0682"},{"name":"http://www.coresecurity.com/?action=item&id=2147","refsource":"MISC","url":"http://www.coresecurity.com/?action=item&id=2147"},{"name":"GLSA-200803-13","refsource":"GENTOO","url":"http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-0984","datePublished":"2008-02-26T19:00:00.000Z","dateReserved":"2008-02-26T00:00:00.000Z","dateUpdated":"2024-08-07T08:01:40.120Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-02-26 19:44:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miro:miro_player:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"D3716EED-983F-4088-8CF0-18EF18D4A9B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.6d","matchCriteriaId":"A14F15BC-28B2-4DCF-86CC-8213DD66402C"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"984","Ordinal":"1","Title":"CVE-2008-0984","CVE":"CVE-2008-0984","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"984","Ordinal":"1","NoteData":"The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.","Type":"Description","Title":"CVE-2008-0984"},{"CveYear":"2008","CveId":"984","Ordinal":"2","NoteData":"2008-02-26","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"984","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}