DSA-2211-1 vlc - missing input sanitising

Bulletin has no description...

FreeBSD Ports: vlc

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VLC Media Player '.mkv' Code Execution Vulnerability - Windows

VLC Media Player is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-0531

creationtimestamp| type| source ---|---|--- 2011-02-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16637 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vlcwebm.rb 2025-02-06 03:13:40+00:00| seen|...

VideoLAN VLC Media Player 1.1.6 - 'MKV' Memory Corruption (Metasploit)

$Id: vlcwebm.rb 11725 2011-02-08 18:22:36Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

CVE-2011-0531

VLC MKV demuxer memory corruption (CVE-2011-0531) affects VideoLAN VLC up to 1.1.6.1 and earlier MKV/WebM demuxer; root cause is memory corruption from class mismatching in MKV demux code (MKV_IS_ID macro), enabling remote code execution and crash via crafted MKV. An exploit (Metasploit module) e...

CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

VideoLAN VLC MKV Memory Corruption

$Id: vlcwebm.rb 11692 2011-02-01 18:54:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-0531

CVE-2010-0531 affects Apple iTunes before 9.1. A crafted MP4 podcast file can trigger an infinite loop in iTunes’ handling of MP4s, causing a denial of service. The issue is mitigated by upgrading to iTunes 9.1 or later, which Apple states fixes involve improved MP4 validation. No exploit details...

iTunes < 9.1 Multiple Vulnerabilities (Mac OS X)

The remote version of iTunes is older than 9.1. Such versions are potentially affected by multiple vulnerabilities : - An infinite loop in the application's handling of imported MP4 podcast files may lead to an application crash and prevent subsequent operation. CVE-2010-0531 - Syncing a mobile...

iTunes < 9.1 Multiple Vulnerabilities

Binary data 5491.prm...

Solaris 9 (sparc) : 120954-12

AM 7.0: Sun Java System Access Manager 2005Q4. Date this patch was last updated by Sun : Nov/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2009-0531

CVE-2009-0531 describes an SQL injection in the web application component gallery/view.asp of the A Better Member-Based ASP Photo Gallery prior to version 1.2. The root cause is improper handling of input for the entry parameter, enabling an attacker to send crafted SQL commands and potentially i...

CVE-2009-0531

creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8012...

CVE-2008-0531

Cisco Unified IP Phone (7940/7940G/7960/7960G) running SIP firmware is affected by CVE-2008-0531 due to a heap overflow in the handling of SIP challenge/response messages, potentially allowing an attacker-controlled SIP proxy or MITM to trigger arbitrary code execution on a vulnerable device. Thi...

CVE-2007-0531

PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter...

CVE-2007-0531

CVE-2007-0531 describes a PHP remote file inclusion vulnerability in FreeWebShop 2.2.3 and 2.2.4 before 20070123, where an attacker can cause arbitrary PHP code execution by supplying a URL in the lang_file parameter of includes/login.php. The affected software is FreeWebShop; the vulnerable comp...

Fedora Core 3 : kernel-2.6.11-1.14_FC3 (2005-313)

This update rebases the kernel to the latest upstream stable release, which fixes a number of security issues. Notably : - CVE-2005-0210 : dst leak - CVE-2005-0384 : ppp dos - CVE-2005-0531 : Sign handling issues. - CVE-2005-0400 : EXT2 information leak. - CVE-2005-0449 : Remote oops. -...

CVE-2005-0531

CVE-2005-0531 refers to a bug in the Linux kernel (2.6.10 and 2.6.11 before 2.6.11-rc4) where the atm_get_addr function in addr.c could be triggered by negative length arguments, allowing a local user to overwrite substantial kernel memory. The issue stems from insufficient input validation in th...