Lucene search
Gentoo FoundationMGASA-2015-0324HistoryAug 25, 2015 - 9:17 p.m.
Updated vlc packages fix security vulnerability
2015-08-2521:17:48
Gentoo Foundation
advisories.mageia.org
6
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.192 Low
EPSS
Percentile
96.2%
Loren Maggiore of Trail of Bits discovered that the 3GP parser of VLC, a multimedia player and streamer, could dereference an arbitrary pointer due to insufficient restrictions on a writable buffer. This could allow remote attackers to execute arbitrary code via crafted 3GP files (CVE-2015-5949).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | vlc | < 2.2.1-1.1 | vlc-2.2.1-1.1.mga5 |
| Mageia | 5 | noarch | vlc | < 2.2.1-1.1 | vlc-2.2.1-1.1.mga5.tainted |
Related
nessus
nessus
openSUSE Security Update : vlc (openSUSE-2016-213)
2016-02-17 00:00:00
VLC < 2.2.2 DoS
2020-06-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0329)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3342-1)
2015-08-19 00:00:00
suse
suse
Security update for vlc (important)
2016-02-16 21:11:57
freebsd
freebsd
vlc -- arbitrary pointer dereference vulnerability
2015-08-20 00:00:00
cve
cve
CVE-2015-5949
2015-08-25 17:59:00
securityvulns
securityvulns
[oCERT-2015-009] VLC arbitrary pointer dereference
2015-08-24 00:00:00
VLC uninitialized pointer dereference
2015-08-24 00:00:00
debian
debian
[SECURITY] [DSA 3342-1] vlc security update
2015-08-20 15:29:52
prion
prion
Information disclosure
2015-08-25 17:59:00
ubuntucve
ubuntucve
CVE-2015-5949
2015-08-25 00:00:00
debiancve
debiancve
CVE-2015-5949
2015-08-25 17:59:00
mageia
mageia
Updated vlc packages fix security vulnerabilities
2015-08-27 23:49:46
gentoo
gentoo
VLC: Multiple vulnerabilities
2016-03-12 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.192 Low
EPSS
Percentile
96.2%
Related for MGASA-2015-0324