KLA10791 Buffer overflow vulnerability in VLC media player

Buffer overflow vulnerability was found in VLC media player. By exploiting this vulnerability malicious users can cause a denial of service crash. This vulnerability can be exploited remotely via a crafted wav file. Technical details This vulnerability is in the AStreamPeekStream function in...

VLC for Android beta - BSD license, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application VLC for Android beta published at the 'play' market has multiple vulnerabilities...

VLC Streamer Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VLC Streamer Free published at the 'play' market has multiple vulnerabilities...

VLC Direct - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VLC Direct published at the 'play' market has multiple vulnerabilities...

VLC Mobile Remote - PC & Mac - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VLC Mobile Remote - PC & Mac published at the 'play' market has multiple vulnerabilities...

VLC media player handles MIDI file memory corruption vulnerability

VLC media player is a well-known multimedia player that can play video and audio in many formats. The software suffers from a memory corruption vulnerability when handling MIDI format files. This allows attackers to exploit this vulnerability to construct malformed MIDI files and crash the progra...

GLSA-201603-08 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-08 VLC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could possibly execute arbitrary code or cause...

Gentoo Security Advisory GLSA 201603-08

Gentoo Linux Local Security Checks GLSA 201603-08 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

VLC: Multiple vulnerabilities

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact Remote attackers could possibly execute arbitrary code or cause Denial of Service...

Updated vlc packages fix security vulnerabilities

Updated vlc packages fix security vulnerabilities: The vlc package has been updated to version 2.2.2, which fixes several bugs and possible security issues. See the NEWS file for details...

MGASA-2016-0083 Updated vlc packages fix security vulnerabilities

Updated vlc packages fix security vulnerabilities: The vlc package has been updated to version 2.2.2, which fixes several bugs and possible security issues. See the NEWS file for details...

openSUSE Security Update : ffmpeg (openSUSE-2016-246)

This update to ffmpeg 2.8.6 fixes the following issues : - CVE-2016-2329: Remote DoS via crafted TIFF files boo966674 VLC was updated to 2.8.6, containing various other upstream bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : vlc (openSUSE-2016-213)

This update for vlc fixes the following issues : - CVE-2015-5949: Remote attackers could have caused a denial of service crash and possibly execute arbitrary code via a crafted 3GP file boo965227 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE: Security Advisory for vlc (openSUSE-SU-2016:0476-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for vlc (important)

This update for vlc fixes the following issues: - CVE-2015-5949: Remote attackers could have caused a denial of service crash and possibly execute arbitrary code via a crafted 3GP file boo965227...

VideoLAN VLC Media Player 2.2.1 - .mp4 Heap Memory Corruption

VideoLAN VLC Media Player 2.2.1 - .mp4 Heap Memory Corruption Application: VLC media player Platforms: Windows Versions: Version 2.2.1 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC...

VideoLAN VLC Media Player 2.2.1 - '.mp4' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: VLC media player Platforms: Windows Versions: Version 2.2.1 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

VideoLAN VLC Media Player 2.2.1 - '.mp4' Heap Memory Corruption

Application: VLC media player Platforms: Windows Versions: Version 2.2.1 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== VLC media player common...

VLC DLL Hijack

Hi @ll, the executable installers ° of the videolan client VLC, see are vulnerable: 1. They load and execute a rogue/bogus/malicious ShFolder.dll '² and other DLLs like SetupAPI.dll or UXTheme.dll too eventually found in the directory they are started from the "application directory". For softwar...

VLC Media Player Web Interface Cross Site Scripting Vulnerability (Dec 2015) - Linux

VLC media player is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...