Buffer Overflow vulnerability in VLC media player

VideoLAN recently published a security advisory warning of a buffer overflow vulnerability in versions 2.0.5 and earlier of VLC Media Player, which might be exploited to execute arbitrary code. This vulnerability was reported by Debasish Mandal. The vulnerability is caused due to an error in the...

Buffer Overflow vulnerability in VLC media player

VideoLAN recently published a security advisory warning of a buffer overflow vulnerability in versions 2.0.5 and earlier of VLC Media Player, which might be exploited to execute arbitrary code. This vulnerability was reported by Debasish Mandal. The vulnerability is caused due to an error in the...

Buffer Overflow Vulnerability Found in VLC Media Player

A buffer overflow could occur in VideoLAN’s VLC cross-platform multimedia player when attempting to parse a specially crafted advanced systems format ASF movie, a researcher reported. The vulnerability, found by security researcher Debasish Mandal, exists in the ASF demuxer of VLC media player...

VideoLAN VLC Media Player PNG Code Execution (CVE-2012-5470)

A buffer overread vulnerability has been reported in VideoLAN VLC Media Player...

VLC Media Player < 2.0.5 Multiple Vulnerabilities

Binary data 801175.prm...

VLC Media Player < 2.0.5 Multiple Vulnerabilities

Binary data 6658.prm...

VLC < 2.0.5 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.0.5. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in the SHAddToRecentDocs function in VideoLAN VLC media player before 2.0.5. Allow user-assisted...

VLC Media Player HTML subtitle parsing buffer overflow vulnerability-vulnerability warning-the black bar safety net

Affected system: VideoLAN VLC Media Player 2. x Description: VLC Media Player is a multimedia player. VLC Media Player modules/codec/subsdec. c when parsing HTML subtitles when there is an error, the attacker through carefully constructed the subtitle can cause a buffer overflow, resulting in...

VLC Player 2.0.3 (NULL File) Local Heap Crashed

The bug is just a local crash poc , when you open null file 0 bytes they make the VLC try to open the file multiple times and this make a local heap null bytes and make a local crash. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

VLC Media Player 'swf'文件栈缓冲区溢出漏洞

BUGTRAQ ID: 56861 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC media player 2.0.4及其他版本在处理恶意文件时没有正确进行边界检查，通过诱使受害者打开特制的SWF文件，远程攻击者可利用此漏洞使缓冲区溢出，在系统中执行任意代码或造成应用崩溃。 0 VLC Media Player 2.0.4 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

VideoLAN VLC Media Player 2.0.4 - '.swf' Crash (PoC)

Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : www.videolan.org/vlc/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh VLC media player also known as VLC is a highly...

VideoLAN VLC Media Player 2.0.4 - .swf Crash (PoC)

VideoLAN VLC Media Player 2.0.4 - .swf Crash PoC Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : www.videolan.org/vlc/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh VL...

VLC media player 2.0.4 buffer overflow PoC

buffer overflow during the handling of the swf file context-dependent Successful exploits can allow attackers to execute arbitrary code Title : VLC media player 2.0.4 buffer overflow POC Version : 2.0.4 Twoflower Date : 2012-12-06 Vendor : http://www.videolan.org/vlc/ Impact : Med/High Contact :...

VLC get_chunk_header Function TiVo File Remote Code Execution

The version of VLC installed on the remote host is 0.x later than 0.9.0 or 1.x earlier than or equal to 1.1.12. It, therefore, contains a double-free error in the function 'getchunkheader' in the file 'modules/demux/ty.c'. This error can be exploited by a specially crafted TiVo TY file, which cou...

VLC Media Player TiVo Demuxer Double Free Vulnerability (Mac OS X)

This host is installed with VLC Media Player and is prone to double free vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerdemuxerdoublefreevulnmacosx.nasl 5988 2017-04-20 09:02:29Z teissa $ VLC Media Player TiVo Demuxer Double Free Vulnerability Mac OS X Authors: Antu Sanadi...

VLC Media Player 'libpng_plugin' Denial of Service Vulnerability (Windows)

This host is installed with VLC Media Player and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerlibpngplugindosvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player 'libpngplugin' Denial of Service Vulnerability Windows Authors: Antu Sana...

VLC Media Player TiVo Demuxer Double Free Vulnerability - Windows

VLC Media Player is prone to double free vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videolan:vlcmediaplayer";...

VLC Media Player 'libpng_plugin' Denial of Service Vulnerability (Mac OS X)

This host is installed with VLC Media Player and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerlibpngplugindosvulnmacosx.nasl 5977 2017-04-19 09:02:22Z teissa $ VLC Media Player 'libpngplugin' Denial of Service Vulnerability Mac OS X Authors: Antu...

VLC Media Player TiVo Demuxer Double Free Vulnerability - Mac OS X

VLC Media Player is prone to double free vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VLC Media Player 'libpng_plugin' Denial of Service Vulnerability - Mac OS X

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...