VLC Media Player < 0.8.6f Multiple Vulnerabilities (deprecated)

Binary data 4429.prm...

vlc086e-overflow.txt

/ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; printf...

VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n" "ScriptType: v4.00\r\n" "Collisions: Normal\r\n" "V4 Styles\r\n" "Events\r\n"...

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow / VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; print...

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow

/ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; printf"3 version 8.06.e\r\nChose:"; j=getchar; switchj...

LIVE555 Media Server: Denial of service

Background LIVE555 Media Server is a set of libraries for multimedia streaming. Description Luigi Auriemma reported a signedness error in the parseRTSPRequestString function when processing short RTSP queries. Impact A remote attacker could send a specially crafted RTSP query to the vulnerable...

GLSA-200803-13 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-13 VLC: Multiple vulnerabilities Multiple vulnerabilities were found in VLC: Michal Luczaj and Luigi Auriemma reported that VLC contains boundary errors when handling subtitles in the ParseMicroDvd, ParseSSA, and ParseVplay...

VLC: Multiple vulnerabilities

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities were found in VLC: Michal Luczaj and Luigi Auriemma reported that VLC contains boundary errors when handling subtitles in the ParseMicroDvd, ParseSSA, and ParseVplayer functions in the...

Win32 binary codecs: Multiple vulnerabilities

Background Win32 binary codecs provide support for video and audio playback. Description Multiple buffer overflow, heap overflow, and integer overflow vulnerabilities were discovered in the Quicktime plugin when processing MOV, FLC, SGI, H.264 and FPX files. Impact A remote attacker could entice ...

VideoLAN VLC媒体播放器MP4 Demuxer远程代码执行漏洞

BUGTRAQ ID: 28007 CVECAN ID: CVE-2008-0984 VLC Media Player是一款免费的媒体播放器。 VLC媒体播放器的MPEG-4文件格式解析器（MP4 demuxer）在解析特制的MP4输入文件时存在任意内存覆盖漏洞，远程攻击者可能利用此漏洞控制用户系统。 以下demux/mp4/mp4.c文件中的漏洞代码使用用户提供的数据初始化堆数组的任意索引： /----------- 910 if !pco64 = MP4BoxGet pdemuxtrack-pstbl, "stco" && 911 !pco64 = MP4BoxGet...

CORE-2008-0130: VLC media player chunk context validation error

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs VLC media player chunk context validation error Advisory Information Title: VLC media player chunk context validation error Advisory ID: CORE-2008-0130 Advisory URL:...

DTSA-116-1 vlc - arbitrary code execution

Bulletin has no description...

VLC media player chunk context validation error

1. Advisory Information Title: VLC media player chunk context validation error Advisory ID: CORE-2008-0130 Advisory URL:https://www.coresecurity.com/core-labs/advisories/advisory-vlc Date published: 2008-02-27 Date of last update: 2008-02-27 Vendors contacted: VLC, Miro player Release mode:...

Core Security Technologies Advisory 2008.0130

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs VLC media player chunk context validation error Advisory Information Title: VLC media player chunk context validation error Advisory ID: CORE-2008-0130 Advisory URL:...

CVE-2008-0984

The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...

Design/Logic Flaw

The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...

CVE-2008-0984

The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...

DEBIAN-CVE-2008-0984

The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...

CVE-2008-0984

The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...

CVE-2008-0984

The CVE-2008-0984 issue affects VLC media player up to version 0.8.6d (and its inclusion in Miro Player). The vulnerability is in the MP4 demuxer (mp4.c) where insufficient integrity checks allow a crafted MP4 file to cause memory corruption and remote code execution. Connected advisories (e.g., ...