CVE-2010-1442

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted byte stream to the 1 AVI, 2 ASF, or 3 Matroska aka MKV demuxer...

CVE-2010-1442

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted byte stream to the 1 AVI, 2 ASF, or 3 Matroska aka MKV demuxer...

CVE-2010-2062

CVE-2010-2062 describes an integer underflow in the real_get_rdt_chunk function (real.c) used by VLC media player and MPlayer. The vulnerability affects VLC before 1.0.1 and MPlayer before r29447, where a crafted length value in an RDT chunk header can cause a remote attacker to execute arbitrary...

CVE-2010-1443

CVE-2010-1443 affects VideoLAN VLC media player prior to 1.0.6, specifically the XSPF playlist parser’s parse_track_node function in modules/demux/playlist/xspf.c. The issue allows unauthenticated remote attackers to trigger a denial of service via an empty location element in an XML Shareable Pl...

CVE-2011-3623

CVE-2011-3623 affects VideoLAN VLC media player

CVE-2010-1441

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream to the 1 A/52, 2 DTS, or 3 MPEG Audio decoder...

CVE-2010-1443

The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...

CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream in an RTMP session...

CVE-2010-1445

VLC Media Player before 1.0.6 is affected by CVE-2010-1445, a heap-based buffer overflow in the RTMP handling that can be exploited by a crafted byte stream to cause a denial of service or potentially execute arbitrary code. The vulnerability is remote and unauthenticated (network attack vector) ...

CVE-2010-1444

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted archive...

CVE-2010-2062: Undefined Security Weakness

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...

CVE-2010-1444: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted archive...

CVE-2010-1442: Improper Restriction of Operations within the Bounds of a Memory Buffer

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted byte stream to the 1 AVI, 2 ASF, or 3 Matroska aka MKV demuxer...

CVE-2010-1441: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream to the 1 A/52, 2 DTS, or 3 MPEG Audio decoder...

CVE-2010-1443: Undefined Security Weakness

The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...

CVE-2011-3623: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file, related to the AVIChunkDumpDebuglevel function...

CVE-2010-1445: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream in an RTMP session...

GLSA-201411-01 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201411-01 VLC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially craft...

VLC: Multiple vulnerabilities

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted media file using VLC,...

VLC Media Player < 2.1.5 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is prior to 2.1.5. It is, therefore, affected by the following vulnerabilities : - An error exists in the pngpushreadchunk function within the file 'pngpread.c' from the included libpng library that can allow denial of service attacks...