Memory corruption

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

CVE-2011-0531

VLC MKV demuxer memory corruption (CVE-2011-0531) affects VideoLAN VLC up to 1.1.6.1 and earlier MKV/WebM demuxer; root cause is memory corruption from class mismatching in MKV demux code (MKV_IS_ID macro), enabling remote code execution and crash via crafted MKV. An exploit (Metasploit module) e...

CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

CVE-2011-0522

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0522

CVE-2011-0522 affects VLC Media Player 1.1 and earlier, where the StripTags path in USF and Text subtitle decoders (subsdec.c, subsusf.c) can be triggered by a specially crafted MKV subtitle containing an opening “”. This leads to heap memory corruption and remote code execution as demonstrated b...

CVE-2011-0522

The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...

CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary commands via a crafted MKV WebM or Matroska file that triggers memory corruption, related to "class mismatching" and the...

VLC Media Player Subtitle StripTags() Function Memory Corruption

Exploit for multiple platform in category dos / poc Source: http://www.securityfocus.com/bid/46008/info VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cau...

VideoLAN VLC MKV Memory Corruption

This module exploits an input validation error in VideoLAN VLC 'VideoLAN VLC MKV Memory Corruption', 'Description' = %q This module exploits an input validation error in VideoLAN VLC MSFLICENSE, 'Author' = 'Dan Rosenberg' , 'References' = 'OSVDB', '70698' , 'CVE', '2011-0531' , 'BID', '46060' ,...

VideoLAN VLC Media Player 1.1 - Subtitle StripTags() Memory Corruption

VideoLAN VLC Media Player 1.1 - Subtitle StripTags Memory Corruption Source: https://www.securityfocus.com/bid/46008/info VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Faile...

FreeBSD : vlc -- Insufficient input validation in MKV demuxer (f9258873-2ee2-11e0-afcd-0015f2db7bde)

VLC team reports : When parsing an invalid MKV Matroska or WebM file, input validation are insufficient. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine...

VideoLAN VLC MKV Memory Corruption

$Id: vlcwebm.rb 11692 2011-02-01 18:54:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

VLC Media Player Memory Corruption

VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. An attacker can exploit this issue by enticing an unsuspecting user to...

VideoLAN VLC Media Player 1.1 - Subtitle 'StripTags()' Memory Corruption

Source: https://www.securityfocus.com/bid/46008/info VLC media player is prone to a heap-based memory-corruption vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. An attacker can...

VLC Media Player < 1.1.7 Code Execution Vulnerability

Binary data 801173.prm...

VLC Media Player < 1.1.7 Code Execution Vulnerability (deprecated)

Binary data 5756.prm...

VideoLAN Releases Security Advisory for VLC Media Player

VideoLAN has released a security advisory to address a vulnerability in VLC Media Player. This vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review VideoLAN security advisory VideoLAN-SA-1102 and apply any necessary updates or...

VLC Media Player < 1.1.7 MKV Input Validation Vulnerability

The version of VLC media player installed on the remote host is earlier than 1.1.7. Such versions are reportedly affected by the following vulnerability : - Insufficient input validation when parsing a specially crafted Matroska or WebM MKV file can be exploited to execute arbitrary code. C Tenab...

VideoLAN VLC Media Player 0.9.4 - TiVo Buffer Overflow (Metasploit)

$Id: videolantivo.rb 11701 2011-02-02 21:47:02Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...