UBUNTU-CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

Integer overflow

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

DSA-5297-1 vlc - security update

Bulletin has no description...

CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

CVE-2022-41325: Integer Overflow or Wraparound

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

CVE-2022-41325

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions...

CVE-2022-41325

The CVE-2022-41325 entry concerns a vulnerability in VideoLAN VLC Media Player’s VNC module up to version 3.0.17.4, caused by an integer overflow that can be triggered by opening a crafted playlist or connecting to a rogue VNC server. Impact stated: crash or potential code execution under certain...

Debian dla-3216 : libvlc-bin - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3216 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3216-1 [email protected] https://www.debian.org/lts/security/...

PT-2022-5776

Name of the Vulnerable Software and Affected Versions VLC Media Player versions through 3.0.17.4 VLC Media Player versions through 3.0.18 Description The issue is related to an integer overflow in the VNC module of the VLC Media Player. This can be exploited by tricking a user into opening a...

Russound XSourcePlayer Code Execution Vulnerability

XSourcePlayer is an audio player from Russound. A code execution vulnerability exists in Russound XSourcePlayer version 777D v06.08.03, which stems from a failure of the scriptRunner.cgi component to properly filter special elements of constructed snippets. An attacker can exploit the vulnerabili...

VideoLAN VLC Media Player: Vulnerability in input validation

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports playback of multiple media files, CD-ROMs, etc., multiple audio and video formats WMV, MP3, etc., etc. A security vulnerability exists i...

Ondisk Player data manipulation vulnerability

Ondisk Player is a player from the Korean company Ondisk. A security vulnerability exists in Ondisk Player versions prior to 1.3.9.19, which stems from insufficient validation of URLs, etc. A remote attacker can exploit this vulnerability to cause malicious code to be downloaded and executed by a...

WordPress Flowplayer Video Player plugin <= 1.0.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Lana Codes in WordPress Flowplayer Video Player plugin versions = 1.0.4. Solution Update the WordPress Flowplayer Video Player plugin to the latest available version at least 1.0.5...

Videojs HTML5 Player < 1.1.9 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks PoC As a contributor, put the following shortcode in a page/post videojsvideo...

Videojs HTML5 Player < 1.1.9 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks As a contributor, put the following shortcode in a page/post videojsvideo url=...

WordPress Videojs HTML5 Player plugin <= 1.1.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Lana Codes in WordPress Videojs HTML5 Player plugin versions = 1.1.8. Solution Update the WordPress Videojs HTML5 Player plugin to the latest available version at least 1.1.9...