Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2008-2147

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory.

  • Published: May 12, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-2147
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
videolan / vlc 0.8.0 0.8.0.x
videolan / vlc 0.8.5 0.8.5.x
videolan / vlc 0.7.0 0.7.0.x
videolan / vlc 0.4.6 0.4.6.x
videolan / vlc 0.8.4 0.8.4.x
videolan / vlc 0.8.6b 0.8.6b.x
videolan / vlc 0.5.3 0.5.3.x
videolan / vlc 0.6.0 0.6.0.x
videolan / vlc 0.8.6c 0.8.6c.x
videolan / vlc 0.7.1 0.7.1.x
videolan / vlc 0.6.1 0.6.1.x
videolan / vlc 0.6.2 0.6.2.x
videolan / vlc 0.5.2 0.5.2.x
videolan / vlc 0.5.1a 0.5.1a.x
videolan / vlc 0.8.1 0.8.1.x
videolan / vlc 0.8.6d 0.8.6d.x
videolan / vlc 0.5.0 0.5.0.x
videolan / vlc 0.8.6e 0.8.6e.x
videolan / vlc 0.5.1 0.5.1.x
videolan / vlc 0.7.2 0.7.2.x
videolan / vlc - 0.8.6.x
videolan / vlc 0.8.2 0.8.2.x
videolan / vlc 0.8.4a 0.8.4a.x
videolan / vlc 0.8.6a 0.8.6a.x