CVE-2008-4558: Videolan Vlc Media Player

Medium severity, CVSS 6.8. EPSS: 8.5% chance of exploitation in the next 30 days.

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.

Affected products

• Videolan Vlc Media Player: version 0.9.2 only

Published 2008-10-15. Last modified 2026-06-16.