Libbpg BGP image decoding Code Execution Vulnerability

Summary An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This vulnerability can be...

VLC: Buffer overflow

Background VLC is a cross-platform media player and streaming server. Description A buffer overflow was discovered in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in the VideoLAN VLC media player. Impact Remote attackers, by enticing a user to execute a specially crafted QuickTime IMA...

GLSA-201701-39 : VLC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201701-39 VLC: Buffer overflow A buffer overflow was discovered in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in the VideoLAN VLC media player. Impact : Remote attackers, by enticing a user to execute a specially craft...

VideoLAN VLC Media Player 2.2.1 - DecodeAdpcmImaQT Buffer Overflow Exploit

Exploit for windows platform in category dos / poc In modules/codec/adpcm.c, VLC can be made to perform an out-of-bounds write with user-controlled input. The function DecodeAdpcmImaQT at adpcm.c:595 allocates a buffer which is filled with bytes from the input stream. However, it does not check...

VLC Media Player 2.x < 2.2.1 Multiple Vulnerabilities

Binary data 9798.prm...

VLC Media Player 2.x < 2.2.4 RCE

Binary data 9799.prm...

VLC Media Player Buffer Overflow Vulnerability (CNVD-2016-08641)

VLC media player is a well-known multimedia player that can play video and audio in many formats. A buffer overflow vulnerability exists in VLC media player, which can be exploited by an attacker to cause a denial of service and execute arbitrary code because the program fails to adequately...

VLC Media Player Buffer Overflow Vulnerability (Oct 2016)

VLC media player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player 2.2.1 Buffer Overflow

Exploit Title: VLC Media Player 2.2.1 Buffer Overflow 2016-09-28 Author: sultan albalawi Software Link: https://www.videolan.org/vlc/releases/2.2.1.html Tested on:win7 video...

VideoLAN VLC Media Player 2.2.1 - Buffer Overflow

Exploit Title: VLC Media Player 2.2.1 Buffer Overflow 2016-09-28 Author: sultan albalawi Software Link: https://www.videolan.org/vlc/releases/2.2.1.html Tested on:win7 video...

VLC Media Player 2.2.1 - Buffer Overflow Exploit

Exploit for windows platform in category dos / poc Exploit Title: VLC Media Player 2.2.1 Buffer Overflow 2016-09-28 Author: sultan albalawi Software Link: https://www.videolan.org/vlc/releases/2.2.1.html Tested on:win7 video...

VLC for Android - BSD license, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application VLC for Android published at the 'play' market has multiple vulnerabilities...

The vulnerability of the VLC Media Player software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Overfilling the buffer in the readserverhello function in lib/gnutlshandshake.c in GnuTLS allows remote servers to trigger a service failure a memory-related error or execute arbitrary code using the long session identifier in the ServerHello message...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the gnome-vlc package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the VLC Media Player software, which allows a malicious attacker to compromise the accessibility of protected information

The vulnerability in the pngPushReadChunk function in pngpread.c of the progressive decoder library libpng allows malicious actors to induce a service denial lockup and excessive CPU resource consumption by using an empty data block with a length of zero...

vlc: arbitrary code execution

A buffer overflow has been found in the DecodeAdpcmImaQT function of VLC's QuickTime IMA decoder...

openSUSE: Security Advisory for vlc (openSUSE-SU-2016:1651-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : vlc (openSUSE-2016-755)

This update for vlc to version 2.1.6 fixes the following issues : These CVE were fixed : - CVE-2016-5108: Reject invalid QuickTime IMA files boo984382. - CVE-2016-3941: Heap overflow in processing wav files boo973354. These security issues without were fixed : - Fix heap overflow in decomp stream...

openSUSE Security Update : vlc (openSUSE-2016-754)

This update for vlc to 2.2.4 to fix the following security issue : - CVE-2016-5108: Fix out-of-bound write in adpcm QT IMA codec boo984382. This also include an update of codecs and libraries to fix these 3rd party security issues : - CVE-2016-1514: Matroska libebml EbmlUnicodeString Heap...

openSUSE: Security Advisory for vlc (openSUSE-SU-2016:1652-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...