CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file, related to the AVIChunkDumpDebuglevel function...

CVE-2010-1443

The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...

CVE-2010-1444

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted archive...

CVE-2010-1445

VLC Media Player before 1.0.6 is affected by CVE-2010-1445, a heap-based buffer overflow in the RTMP handling that can be exploited by a crafted byte stream to cause a denial of service or potentially execute arbitrary code. The vulnerability is remote and unauthenticated (network attack vector) ...

CVE-2010-1442

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted byte stream to the 1 AVI, 2 ASF, or 3 Matroska aka MKV demuxer...

CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file, related to the AVIChunkDumpDebuglevel function...

CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream in an RTMP session...

CVE-2010-2062

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...

CVE-2010-2062

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...

GLSA-201411-01 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201411-01 VLC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially craft...

VLC: Multiple vulnerabilities

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted media file using VLC,...

VLC Media Player < 2.1.5 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is prior to 2.1.5. It is, therefore, affected by the following vulnerabilities : - An error exists in the pngpushreadchunk function within the file 'pngpread.c' from the included libpng library that can allow denial of service attacks...

Updated kdelibs4 packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the polkit authentication backend of kdelibs CVE-2014-5033 mga13792, and fixes some additional issues: - duplicate targets in PythonMacros.cmake reviewboard kde 111371, - kded4 leak sockets in NetworkInterface::isWireless bko324954, - media type...

Videolan vlc multiple security vulnerabilities

Buffer overflows on different video formats parsing...

[SECURITY] [DSA 2973-1] vlc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2973-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 07, 2014 http://www.debian.org/security/faq -...

Updated live555, vlc & mplayer packages fix several issues

Updated live, mplayer, and vlc packages fix security vulnerabilities: The live555 RTSP streaming server and client libraries before 2013.11.29 are vulnerable to buffer overflows in RTSP command parsing that potentially allow for arbitrary code execution when connected to a malicious client or...

MGASA-2014-0296 Updated live555, vlc & mplayer packages fix several issues

Updated live, mplayer, and vlc packages fix security vulnerabilities: The live555 RTSP streaming server and client libraries before 2013.11.29 are vulnerable to buffer overflows in RTSP command parsing that potentially allow for arbitrary code execution when connected to a malicious client or...

Debian DSA-2973-1 : vlc - security update

Multiple buffer overflows have been found in the VideoLAN media player. Processing malformed subtitles or movie files could lead to denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

[SECURITY] [DSA 2973-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2973-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 07, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2973-1 (vlc - security update)

Multiple buffer overflows have been found in the VideoLAN media player. Processing malformed subtitles or movie files could lead to denial of service and potentially the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2973.nasl 6663 2017-07-11 09:58:05Z teissa $ Auto-generated fro...