CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2013-1954

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

Integer overflow

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

Out-of-bounds

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

Design/Logic Flaw

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

Buffer overflow

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

UBUNTU-CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1868

CVE-2013-1868 affects VLC media player up to version 2.0.4 and earlier. The vulnerabilities are multiple buffer overflows in the freetype renderer and the HTML subtitle parser, enabling remote crashes and potential arbitrary code execution. Debian and OpenVAS advisories summarize the issue and ma...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1954

VLC Media Player (affected: 2.0.5 and earlier) contains a vulnerability in the ASF demuxer (modules/demux/asf/asf.c) where a crafted ASF file can trigger an out-of-bounds read, leading to denial of service and potentially arbitrary code execution. The root cause is an out-of-bounds read in the AS...

CVE-2013-1954

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

CVE-2013-3245

CVE-2013-3245 affects VideoLAN VLC Media Player (e.g., 2.0.7) through the demuxer component plugins/demux/libmkv_plugin.dll. The issue is described as a denial of service with potential for arbitrary code execution via a crafted MKV file, possibly involving an integer overflow and out-of-bounds r...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...