MGASA-2013-0241 Updated vlc package fixes security vulnerability.

2.0.8 Demux: sgimb: use after free fixes 8724 https://trac.videolan.org/vlc/ticket/8724 Improve resistance and checking against malformed MKV files Check element size before reading it. This should avoid integer overflows inside the libebml causing heap buffer overflow. Since new called by the li...

VLC < 2.0.7 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is earlier than 2.0.7 and is, therefore, affected by the following vulnerabilities: - The web interface contains a flaw that does not validate input passed via XML services resulting in a cross-site scripting vulnerability. - A flaw...

VLC Web Interface Detection

The remote web server is the web interface to VLC, a media player. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69016; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"VLC Web Interface Detection"; scriptsummaryenglish:"Detects the VLC Web...

VLC Web Interface XML Services XSS

The VLC media player install on the remote host is affected by a cross-site scripting vulnerability because it fails to sanitize input passed via XML services in the web interface. Note that the install is likely to be affected by additional vulnerabilities as well, although Nessus has not tested...

VLC Web Interface XML Services Remote Command Execution

The web interface for VLC media player listening on the remote host does not require authentication, which allows an unauthenticated remote attacker to issue XML service commands via the VLC Web Interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

VLC Media Player Buffer Overflow Vulnerability - July 13 (MAC OS X)

This host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerbofvulnjul13macosx.nasl 6079 2017-05-08 09:03:33Z teissa $ VLC Media Player Buffer Overflow Vulnerability - July 13 MAC OS X Authors: Arun Kallavi Copyright:...

VLC Media Player Multiple Vulnerabilities - July 13 (MAC OS X)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnjul13macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ VLC Media Player Multiple Vulnerabilities - July 13 MAC OS X Authors: Arun Kallavi Copyright: Copyrigh...

VLC Media Player Multiple Vulnerabilities - July 13 (Windows)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnjul13win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - July 13 Windows Authors: Arun Kallavi Copyright: Copyright ...

VLC Media Player Buffer Overflow Vulnerability - July 13 (Windows)

This host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerbofvulnjul13win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Buffer Overflow Vulnerability - July 13 Windows Authors: Arun Kallavi Copyright:...

VLC Media Player Buffer Overflow Vulnerability (Jul 2013) - Mac OS X

VLC Media Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VLC Media Player Buffer Overflow Vulnerability (Jul 2013) - Windows

VLC Media Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player远程整数溢出漏洞(CVE-2013-3245)

BUGTRAQ ID: 61032 CVECAN ID: CVE-2013-3245 VLC Media Player是多媒体播放器。 VLC Media Player 2.0.7及其他版本在解析MKV文件时，libmkvplugin.dll模块存在整数溢出错误，远程攻击者通过特制标头的MKV文件，利用此漏洞可造成堆缓冲区溢出。 0 VLC Media Player 2.x 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/...

CVE-2013-1954

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

DEBIAN-CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

DEBIAN-CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1954

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...