2553 matches found
VideoLAN VLC media player multiple security vulnerabilities
Buffer overflow on subtitles parsing, format string vulnerability in Web interface TCP/8080...
VLC highlander bug
The old buffer-overflow in the subtitles handled by VLC has not been fully patched in version 0.8.6e, in fact buffertext2 in ParseSSA is still unchecked: if sscanf s, "Dialogue: ^,,d:d:d.d,d:d:d.d,81920^rn", buffertext2, The funny thing is that my old proof-of-concept was built just to test this...
VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit
No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...
VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow
VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow / VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; print...
VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n" "ScriptType: v4.00\r\n" "Collisions: Normal\r\n" "V4 Styles\r\n" "Events\r\n"...
VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow
/ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; printf"3 version 8.06.e\r\nChose:"; j=getchar; switchj...
VLC Media Player < 0.8.6f Multiple Vulnerabilities (deprecated)
Binary data 4429.prm...
vlc086e-overflow.txt
/ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; printf...
GLSA-200803-13 : VLC: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200803-13 VLC: Multiple vulnerabilities Multiple vulnerabilities were found in VLC: Michal Luczaj and Luigi Auriemma reported that VLC contains boundary errors when handling subtitles in the ParseMicroDvd, ParseSSA, and ParseVplay...
LIVE555 Media Server: Denial of service
Background LIVE555 Media Server is a set of libraries for multimedia streaming. Description Luigi Auriemma reported a signedness error in the parseRTSPRequestString function when processing short RTSP queries. Impact A remote attacker could send a specially crafted RTSP query to the vulnerable...
VLC: Multiple vulnerabilities
Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities were found in VLC: Michal Luczaj and Luigi Auriemma reported that VLC contains boundary errors when handling subtitles in the ParseMicroDvd, ParseSSA, and ParseVplayer functions in the...
Win32 binary codecs: Multiple vulnerabilities
Background Win32 binary codecs provide support for video and audio playback. Description Multiple buffer overflow, heap overflow, and integer overflow vulnerabilities were discovered in the Quicktime plugin when processing MOV, FLC, SGI, H.264 and FPX files. Impact A remote attacker could entice ...
VideoLAN VLC媒体播放器MP4 Demuxer远程代码执行漏洞
BUGTRAQ ID: 28007 CVECAN ID: CVE-2008-0984 VLC Media Player是一款免费的媒体播放器。 VLC媒体播放器的MPEG-4文件格式解析器（MP4 demuxer）在解析特制的MP4输入文件时存在任意内存覆盖漏洞，远程攻击者可能利用此漏洞控制用户系统。 以下demux/mp4/mp4.c文件中的漏洞代码使用用户提供的数据初始化堆数组的任意索引： /----------- 910 if !pco64 = MP4BoxGet pdemuxtrack-pstbl, "stco" && 911 !pco64 = MP4BoxGet...
CORE-2008-0130: VLC media player chunk context validation error
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs VLC media player chunk context validation error Advisory Information Title: VLC media player chunk context validation error Advisory ID: CORE-2008-0130 Advisory URL:...
DTSA-116-1 vlc - arbitrary code execution
Bulletin has no description...
Core Security Technologies Advisory 2008.0130
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs VLC media player chunk context validation error Advisory Information Title: VLC media player chunk context validation error Advisory ID: CORE-2008-0130 Advisory URL:...
VLC media player chunk context validation error
1. Advisory Information Title: VLC media player chunk context validation error Advisory ID: CORE-2008-0130 Advisory URL:https://www.coresecurity.com/core-labs/advisories/advisory-vlc Date published: 2008-02-27 Date of last update: 2008-02-27 Vendors contacted: VLC, Miro player Release mode:...
CVE-2008-0984
The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...
CVE-2008-0984
The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...
Design/Logic Flaw
The MP4 demuxer mp4.c for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file...