2510 matches found
NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write
LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...
FreeBSD : VLC -- Heap corruption in MP4 demultiplexer (6a4bfe75-692a-11e0-bce7-001eecdd401a)
VideoLAN project reports : When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
VLC mediaplayer buffer overflow
Heap oveflow on MP4 parsing...
[SECURITY] [DSA 2218-1] vlc security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2218-1 [email protected] http://www.debian.org/security/ Nico Golde April 12, 2011 http://www.debian.org/security/faq -...
VLC Media Player 'MP4'堆缓冲区溢出漏洞
Bugtraq ID: 47293 VLC Media Player是一款流行的多媒体播放程序。 modules/demux/mp4/libmp4.c提供的"MP4ReadBoxskcr"函数存在错误，远程攻击者可以构建恶意MP4文件，诱使用户解析，触发缓冲区溢出，成功利用漏洞可以以应用程序安全上下文执行任意代码。 VideoLAN VLC media player 1.1.8 厂商解决方案 VideoLAN VLC media player 1.1.9已经修复此漏洞，建议用户下载使用： http://www.videolan.org/...
Debian DSA-2218-1 : vlc - heap-based buffer overflow
Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially...
VLC Media Player < 1.1.9 Multiple Vulnerabilities
The version of VLC media player installed on the remote host is earlier than 1.1.9. Such versions are affected by multiple vulnerabilities: - A heap based buffer overflow exists in the function 'MP4ReadBoxskcr' in 'modules/demux/mp4/libmp4.c'. This issue can be triggered when parsing of a malicio...
[SECURITY] [DSA 2218-1] vlc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2218-1 [email protected] http://www.debian.org/security/ Nico Golde April 12, 2011 http://www.debian.org/security/faq -...
VLC Media Player < 1.1.9 Heap Corruption Vulnerability
Binary data 801170.prm...
VLC Media Player < 1.1.9 Heap Corruption Vulnerability (deprecated)
Binary data 5883.prm...
DSA-2218-1 vlc - heap-based buffer overflow
Bulletin has no description...
VideoLAN Issues Security Advisory
VideoLAN has issued a security advisory to alert users of a vulnerability affecting VLC Media Player versions 1.0.0 through 1.1.8. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators...
VideoLAN VLC Media Player 1.1.8 - ModPlug ReadS3M Stack Buffer Overflow (Metasploit)
$Id: vlcmodplugs3m.rb 12282 2011-04-08 15:48:53Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
Debian DSA-2211-1 : vlc - missing input sanitising
Ricardo Narvaja discovered that missing input sanitising in VLC, a multimedia player and streamer, could lead to the execution of arbitrary code if a user is tricked into opening a malformed media file. This update also provides updated packages for oldstable lenny for vulnerabilities, which have...
VLC -- Heap corruption in MP4 demultiplexer
VideoLAN project reports: When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap...
[SECURITY] [DSA 2211-1] vlc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2211-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 06, 2011 http://www.debian.org/security/faq -...
DSA-2211-1 vlc - missing input sanitising
Bulletin has no description...
VLC Media Player AMV and NSV Data Processing Memory Corruption vulnerability (Windows)
The host is installed with VLC Media Player and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayermemcrptnvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player AMV and NSV Data Processing Memory Corruption vulnerability Windows Authors:...
VLC Media Player AMV and NSV Data Processing Memory Corruption Vulnerability - Windows
VLC Media Player is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VLC Media Player ".AMV"和".NSV"多个远程缓冲区溢出漏洞
BUGTRAQ ID: 47012 CVE ID: CVE-2010-3275,CVE-2010-3276 VLC多媒体播放器具有跨平台的特性，它有Linux、Microsoft Windows、Mac OS X、BeOS、BSD、Pocket PC及Solaris的版本。 VLC多媒体播放器在处理".AMV"和".NSV"文件格式时，在实现上存在多个远程缓冲区溢出漏洞，远程攻击者可利用这些漏洞在实用性应用程序中执行任意代码或使应用程序崩溃，拒绝服务合法用户。 VideoLAN VLC Media Player 1.x 厂商补丁： VideoLAN --------...