Security fix for the ALT Linux 5 package vlc version 1.1.4-alt0.M50P.1

Nov. 17, 2010 Andrey Cherepanov 1.1.4-alt0.M50P.1 - backport to p5 new version with CVE-2010-2937 fix - disable servicesdiscovery/libudevplugin.so - disable SDLimage support...

CVE-2010-2937

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service application crash via a crafted media file...

CVE-2010-2937

VLC media player versions 0.9.0–1.1.2 are affected by CVE-2010-2937 due to improper processing of ID3v2 tags in the ReadMetaFromId3v2 function (TagLib plugin, taglib.cpp), allowing a remote attacker to crash the application via a crafted media file. OSV entries confirm the vulnerability but do no...