CVE-2008-4654 PoC — VLC媒体播放器TY文件处理栈溢出漏洞

Source

https://github.com/bongbongco/CVE-2008-4654

Associated Vulnerability

Title:VLC媒体播放器TY文件处理栈溢出漏洞 (CVE-2008-4654)
Description:Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.

Description

VideoLAN VLC media player 0.9.4 Media Player ty.c buffer overflow

Readme

# CVE-2008-4654
VideoLAN VLC media player 0.9.4 Media Player ty.c buffer overflow  
[Diff](http://git.videolan.org/?p=vlc.git;a=commitdiff;h=d859e6b9537af2d7326276f70de25a840f554dc3)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!