2553 matches found
Speex / VLC / gstreamer-plugins-good / sweep / SDL_sound / vorbis-tools / Xine buffer overflow
Buffer overflow in speexpackettoheader...
Debian DSA-1543-1 : vlc - several vulnerabilities
Luigi Auriemma, Alin Rad Pop, Remi Denis-Courmont, Quovodis, Guido Landi, Felipe Manzano, Anibal Sacco and others discovered multiple vulnerabilities in vlc, an application for playback and streaming of audio and video. In the worst case, these weaknesses permit a remote, unauthenticated attacker...
VLC媒体播放器浏览器插件任意文件覆盖漏洞
BUGTRAQ ID: 28712 CVECAN ID: CVE-2007-6683 VLC Media Player是一款免费的媒体播放器。 VLC Media Player在处理畸形格式的播放列表时存在漏洞，远程攻击者可能利用此漏洞覆盖任意文件。 如果播放列表的文件名中包含有特制:demuxdump-file选项的话，或MP3文件中包含有EXTVLCOPT语句的话，则在打开上述文件时VLC播放器的浏览器插件就可能注入参数，导致覆盖任意文件。 VideoLAN VLC Media Player 0.8.6d 厂商补丁： Debian ------...
VLC Media Player < 0.8.6f Multiple Vulnerabilities
The version of VLC Media Player installed on the remote host reportedly is affected by several security issues : - A subtitle buffer overflow CVE-2007-6681. - A Real RTSP code execution problem CVE-2008-0073. - MP4 integer overflows CVE-2008-1489. - A cinepak integer overflow. C Tenable Network...
VLC Detection
VLC, a free and portable media player from the VideoLAN organization, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31852; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...
[SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1543-1 [email protected] http://www.debian.org/security/ Devin Carraway April 09, 2008 http://www.debian.org/security/faq -...
DTSA-119-1 vlc - arbitrary code execution
Bulletin has no description...
VLC媒体播放器MP4_ReadBox_rdrf()函数堆溢出漏洞
BUGTRAQ ID: 28433 CVECAN ID: CVE-2008-1489 VLC Media Player是一款免费的媒体播放器。 VLC播放器的modules/demux/mp4/libmp4.c文件中的MP4ReadBoxrdrf函数存在整数溢出漏洞，如果用户受骗打开的MP4文件中包含有特制的RDRF元素的话，就可能触发堆溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.8.6e Rémi Denis-Courmont （[email protected]） 链接：http://secunia.com/advisories/29503/...
mplayer-overflowpoc.txt
!/usr/bin/perl Huston, mplayer got some vulns! : CVE-2008-0073 also apply to mplayer and vlc with some distinctions. Assuming kernel.varandomize=0 this overwrite EIP with a "stream" structure on my box. The first element of the "stream" structure is a user-supplied buffer so it is not really usef...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
DEBIAN-CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
Integer overflow
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
[Full-disclosure] CVE-2008-0073 - MPlayer and VLC "sdpplin_parse()" Array Indexing Vulnerability
Hello, CVE-2008-0073 apply also to MPlayer and VLC. -MPlayer-1.0-rc2, stream/realrtsp/sdpplin.c: 161: desc-streamid=atoibuf; 283: desc-streamstream-streamid=stream; - vlc-0.8.6e, modules/access/rtsp/realsdpplin.c: 141: desc-streamid=atoibuf; 257: desc-streamstream-streamid=stream; With MPlayer: e...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...
CVE-2008-1489
CVE-2008-1489 is an integer overflow in VLC’s MP4 handling (MP4_ReadBox_rdrf in libmp4.c) that can cause a heap-based buffer overflow, potentially crashing or executing code. The VLC GLSA entries indicate this was addressed by upgrading to VLC 0.8.6f (fixed in later 0.8.6x builds). Connected advi...
VLC Media Player network/httpd.c httpd_FileCallBack Function Connection Parameter Format String
The remote host is running VLC, a popular media player application which can have an embedded web server. The remote version of this software is vulnerable to a format string attack when processing a malformed 'Connection:' http header. An attacker can exploit this flaw to execute arbitrary...
VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit
No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...