CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

Double free

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

CVE-2012-0023

CVE-2012-0023 is a confirmed VLC vulnerability. Affected VLC versions range from 0.9.0 to 1.1.12 and contain a double-free bug in the get_chunk_header function of modules/demux/ty.c. An attacker can supply a specially crafted TiVo TY file to cause a crash or remote code execution. Several OpenVAS...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

VLC Media Player 读访问冲突任意代码执行漏洞(CVE-2012-5470)

CVE ID:CVE-2012-5470 VideoLAN VLC media player是一款媒体播放程序。 VideoLAN VLC媒体播放器libpngplugin插件存在安全漏洞，允许攻击者构建特制的PNG文件，诱使用户解析，可使应用程序崩溃。 0 VLC media player 2.0.3 厂商解决方案 VideoLAN VLC media player 2.0.4已经修复此漏洞，建议用户下载使用： http://www.videolan.org/vlc/releases/2.0.4.html...

CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

Code injection

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

CVE-2012-5470

CVE-2012-5470 affects VLC Media Player via its libpng_plugin. A crafted PNG file can trigger a denial of service (application crash) in VLC before version 2.0.4 due to an input-validation issue in the PNG handling code. Reported by multiple sources, the vulnerability base score is 4.3 (MEDIUM) wi...

CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

VLC Player 2.0.3 <= ReadAV Arbitrary Code Execution (Update)

!/usr/bin/perl VLC Player 2.0.3 = ReadAV Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD...

VLC code execution

Code execution on PNG files parsing...

VLC Player 2.0.3 ReadAV Arbitrary Code Execution

No description provided by source. !/usr/bin/perl VLC Player 2.0.3 = ReadAV Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays...

VideoLAN VLC Media Player 2.0.3 - '.png' ReadAV Crash (PoC)

!/usr/bin/perl VLC Player 2.0.3 Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and various streaming protocols. Debug Info: Microsoft R Window...

VideoLAN VLC Media Player 2.0.3 - .png ReadAV Crash (PoC)

VideoLAN VLC Media Player 2.0.3 - .png ReadAV Crash PoC !/usr/bin/perl VLC Player 2.0.3 Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and...

VLC Player 2.0.3 ReadAV Arbitrary Code Execution

!/usr/bin/perl VLC Player 2.0.3 Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and various streaming protocols. Debug Info: Microsoft R Window...

VLC Player 2.0.3 <= ReadAV Arbitrary Code Execution

Exploit for windows platform in category local exploits !/usr/bin/perl VLC Player 2.0.3 Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and...

FreeBSD : vlc -- arbitrary code execution in Real RTSP and MMS support (62f36dfd-ff56-11e1-8821-001b2134ef46)

Jean-Baptiste Kempf, on behalf of the VideoLAN project reports : If successful, a malicious third party could crash the VLC media player process. Arbitrary code execution could be possible on some systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

FreeBSD Ports: vlc

The remote host is missing an update to the system as announced in the referenced advisory. VID 62f36dfd-ff56-11e1-8821-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID 62f36dfd-ff56-11e1-8821-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...