Buffer overflow

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...

CVE-2011-1087

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...

CVE-2011-1087

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...

CVE-2011-1087

CVE-2011-1087 is a VLC Media Player bookmark-creation buffer overflow vulnerability affecting VLC 1.0.5 (Linux/Windows as per OpenVAS entries). A crafted .mp3 played during bookmark creation can cause memory corruption, leading to a denial of service or potentially arbitrary code execution. The O...

CVE-2011-1087

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...

libmodplug <= 0.8.8.2 .abc Stack-Based Buffer Overflow PoC

Exploit for linux platform in category dos / poc include include include / libmodplug = 0.8.8.2 .abc stack-based buffer overflow poc http://modplug-xmms.sourceforge.net/ by: epiphant this exploits one of many overflows in loadabc.cpp lol vlc media player uses libmodplug greets: defrost, babi,...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...

NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write

LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...

FreeBSD : VLC -- Heap corruption in MP4 demultiplexer (6a4bfe75-692a-11e0-bce7-001eecdd401a)

VideoLAN project reports : When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

VLC mediaplayer buffer overflow

Heap oveflow on MP4 parsing...

[SECURITY] [DSA 2218-1] vlc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2218-1 [email protected] http://www.debian.org/security/ Nico Golde April 12, 2011 http://www.debian.org/security/faq -...

VLC Media Player < 1.1.9 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is earlier than 1.1.9. Such versions are affected by multiple vulnerabilities: - A heap based buffer overflow exists in the function 'MP4ReadBoxskcr' in 'modules/demux/mp4/libmp4.c'. This issue can be triggered when parsing of a malicio...

VLC Media Player 'MP4'堆缓冲区溢出漏洞

Bugtraq ID: 47293 VLC Media Player是一款流行的多媒体播放程序。 modules/demux/mp4/libmp4.c提供的"MP4ReadBoxskcr"函数存在错误，远程攻击者可以构建恶意MP4文件，诱使用户解析，触发缓冲区溢出，成功利用漏洞可以以应用程序安全上下文执行任意代码。 VideoLAN VLC media player 1.1.8 厂商解决方案 VideoLAN VLC media player 1.1.9已经修复此漏洞，建议用户下载使用： http://www.videolan.org/...

Debian DSA-2218-1 : vlc - heap-based buffer overflow

Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially...

[SECURITY] [DSA 2218-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2218-1 [email protected] http://www.debian.org/security/ Nico Golde April 12, 2011 http://www.debian.org/security/faq -...

VLC Media Player < 1.1.9 Heap Corruption Vulnerability (deprecated)

Binary data 5883.prm...

VLC Media Player < 1.1.9 Heap Corruption Vulnerability

Binary data 801170.prm...

DSA-2218-1 vlc - heap-based buffer overflow

Bulletin has no description...

VideoLAN Issues Security Advisory

VideoLAN has issued a security advisory to alert users of a vulnerability affecting VLC Media Player versions 1.0.0 through 1.1.8. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators...