2510 matches found
VLC Detection
VLC, a free and portable media player from the VideoLAN organization, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31852; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...
VLC Media Player < 0.8.6f Multiple Vulnerabilities
The version of VLC Media Player installed on the remote host reportedly is affected by several security issues : - A subtitle buffer overflow CVE-2007-6681. - A Real RTSP code execution problem CVE-2008-0073. - MP4 integer overflows CVE-2008-1489. - A cinepak integer overflow. C Tenable Network...
[SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1543-1 [email protected] http://www.debian.org/security/ Devin Carraway April 09, 2008 http://www.debian.org/security/faq -...
DTSA-119-1 vlc - arbitrary code execution
Bulletin has no description...
VLC媒体播放器MP4_ReadBox_rdrf()函数堆溢出漏洞
BUGTRAQ ID: 28433 CVECAN ID: CVE-2008-1489 VLC Media Player是一款免费的媒体播放器。 VLC播放器的modules/demux/mp4/libmp4.c文件中的MP4ReadBoxrdrf函数存在整数溢出漏洞，如果用户受骗打开的MP4文件中包含有特制的RDRF元素的话，就可能触发堆溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.8.6e Rémi Denis-Courmont （[email protected]） 链接：http://secunia.com/advisories/29503/...
mplayer-overflowpoc.txt
!/usr/bin/perl Huston, mplayer got some vulns! : CVE-2008-0073 also apply to mplayer and vlc with some distinctions. Assuming kernel.varandomize=0 this overwrite EIP with a "stream" structure on my box. The first element of the "stream" structure is a user-supplied buffer so it is not really usef...
Integer overflow
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
DEBIAN-CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
CVE-2008-1489 is an integer overflow in VLC’s MP4 handling (MP4_ReadBox_rdrf in libmp4.c) that can cause a heap-based buffer overflow, potentially crashing or executing code. The VLC GLSA entries indicate this was addressed by upgrading to VLC 0.8.6f (fixed in later 0.8.6x builds). Connected advi...
[Full-disclosure] CVE-2008-0073 - MPlayer and VLC "sdpplin_parse()" Array Indexing Vulnerability
Hello, CVE-2008-0073 apply also to MPlayer and VLC. -MPlayer-1.0-rc2, stream/realrtsp/sdpplin.c: 161: desc-streamid=atoibuf; 283: desc-streamstream-streamid=stream; - vlc-0.8.6e, modules/access/rtsp/realsdpplin.c: 141: desc-streamid=atoibuf; 257: desc-streamstream-streamid=stream; With MPlayer: e...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
VLC Media Player network/httpd.c httpd_FileCallBack Function Connection Parameter Format String
The remote host is running VLC, a popular media player application which can have an embedded web server. The remote version of this software is vulnerable to a format string attack when processing a malformed 'Connection:' http header. An attacker can exploit this flaw to execute arbitrary...
VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit
No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...
VideoLAN VLC media player multiple security vulnerabilities
Buffer overflow on subtitles parsing, format string vulnerability in Web interface TCP/8080...
VLC highlander bug
The old buffer-overflow in the subtitles handled by VLC has not been fully patched in version 0.8.6e, in fact buffertext2 in ParseSSA is still unchecked: if sscanf s, "Dialogue: ^,,d:d:d.d,d:d:d.d,81920^rn", buffertext2, The funny thing is that my old proof-of-concept was built just to test this...
VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit
No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...