CVE-2014-9625

The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update...

CVE-2014-9625

CVE-2014-9625 affects VideoLAN VLC media player up to version 2.1.5 (vulnerable before 2.1.6). The root cause is an incorrect cast from a 64-bit integer to a 32-bit integer in the GetUpdateFile function of misc/update.c within the Updater, enabling a crafted update status file to cause a buffer o...

CVE-2014-9625

The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update...

PT-2015-4313

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions prior to 2.1.6 Description The issue is related to an integer truncation in the automated updater, specifically in the GetUpdateFile function, which allows remote attackers to conduct buffer overflow attacks...