CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

Integer overflow

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

Code injection

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

DEBIAN-CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3467

CVE-2007-3467 affects VideoLAN VLC Media Player (pre-0.8.6c) due to an integer overflow in the WAV processing path. The vulnerable code is the __status_Update function in stats.c, which can crash the player when it processes a WAV file with a large sample rate, enabling a remote DoS. Connected so...

CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3468

CVE-2007-3468 affects VideoLAN VLC Media Player. The flaw is in input.c parsing WAV data, where an uninitialized i_nb_resamplers variable can be used, enabling a remote attacker to crash the player (DoS) via a crafted WAV file. Affected versions are VLC up to 0.8.6c (before 0.8.6c). The connected...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

VLC 0.8.6b format string vulnerability & integer overflow

iSEC Partners Security Advisory - 2007-001-vlc http://www.isecpartners.com ---------------------------------------------- VLC 0.8.6b format string vulnerability & integer overflow Vendor: VideoLan Vendor URL: http://www.videolan.org Systems Affected: Confirmed on Windows XP, FreeBSD 6.2, MacOS X...

VLC media player multiple security vulnerabilities

Format string vulnerabilities in Ogg Vorbis and Ogg Theora comments parsing, CDDA data, SAP/SDP discovery service. Integer overflow and uninitialized variables on WAV parsing...

Format string

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...

CVE-2007-3316

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...

CVE-2007-3316

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...

CVE-2007-3316

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...