CVE-2008-1489: Videolan Vlc

Medium severity, CVSS 6.8. EPSS: 11.8% chance of exploitation in the next 30 days.

Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984.

Affected products

• Videolan Vlc: version 0.8.6e only

Published 2008-03-25. Last modified 2026-06-16.