Out-of-bounds

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-3245

CVE-2013-3245 affects VideoLAN VLC Media Player (e.g., 2.0.7) through the demuxer component plugins/demux/libmkv_plugin.dll. The issue is described as a denial of service with potential for arbitrary code execution via a crafted MKV file, possibly involving an integer overflow and out-of-bounds r...

CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2013-1868

CVE-2013-1868 affects VLC media player up to version 2.0.4 and earlier. The vulnerabilities are multiple buffer overflows in the freetype renderer and the HTML subtitle parser, enabling remote crashes and potential arbitrary code execution. Debian and OpenVAS advisories summarize the issue and ma...

CVE-2013-1954

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

CVE-2013-1954

VLC Media Player (affected: 2.0.5 and earlier) contains a vulnerability in the ASF demuxer (modules/demux/asf/asf.c) where a crafted ASF file can trigger an out-of-bounds read, leading to denial of service and potentially arbitrary code execution. The root cause is an out-of-bounds read in the AS...

CVE-2012-5855

CVE-2012-5855 affects VideoLAN VLC media player

CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1954

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

CVE-2013-1954: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

CVE-2013-1868: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

PT-2013-4251 · Videolan · Vlc Media Player

Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 2.0.7 Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file. This could involve an integer overflow, out-of-bounds read, ...

CVE-2013-3245: Improper Restriction of Operations within the Bounds of a Memory Buffer

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2012-5855: Undefined Security Weakness

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...