Description
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vlc | 0.8.6.e-1.1 | — |
| Debian 13 | vlc | 0.8.6.e-1.1 | — |
| Debian 12 | vlc | 0.8.6.e-1.1 | — |
| Debian 5.0 | vlc | 0.8.6.c-6+lenny3 | DTSA-119-1 |
| Debian 4.0 | vlc | 0.8.6-svn20061012.debian-5.1+etch2 | DSA-1543-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow EDB-5498 · local · Apr 25, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- DSA-1543-1 vlc - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-119-1 vlc - arbitrary code execution Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-1543 vendor-advisory
- 28433 vdb-entry
- http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a
- http://www.videolan.org/security/sa0803.php
- GLSA-200804-25 vendor-advisory
- http://wiki.videolan.org/Changelog/0.8.6f
- 29800 third-party-advisory
- oval:org.mitre.oval:def:14841 vdb-entry signature
- 29766 third-party-advisory
- 29503 third-party-advisory
- ADV-2008-0985 vdb-entry
- vlcmediaplayer-mp4readbox-rdrf-bo(41412) vdb-entry