View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2008-4686 low priority: Ubuntu including 1 source packages (vlc), 7 status rows across 7 suites (dapper, gutsy, hardy, intrepid, jaunty, karmic, upstream): not-affected 3, ignored 2, released 2.
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.