Integer overflow

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

CVE-2008-1769

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...

CVE-2008-1769

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...

CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

CVE-2008-1769

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...

VLC媒体播放器MP及Cinepak解码器缓冲区溢出漏洞

BUGTRAQ ID: 28904,28903 CVECAN ID: CVE-2008-1769,CVE-2008-1768 VLC Media Player是一款免费的媒体播放器。 VLC处理畸形格式的媒体文件时存在漏洞，如果用户受骗使用VLC播放器打开了特制的媒体文件或流媒体的话，就会在MP4和Cinepak解码器模块中触发缓冲区溢出，导致拒绝服务或执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200804-25）以及相应补丁: GLSA-200804-25：VLC:...

VLC媒体播放器字幕文件栈溢出漏洞

BUGTRAQ ID: 28274 CVECAN ID: CVE-2008-1881 VLC Media Player是一款免费的媒体播放器。 VLC播放器的modules/demux/subtitle.c文件的ParseSSA函数中存在栈溢出漏洞： if sscanf s, "Dialogue: %^,,%d:%d:%d.%d,%d:%d:%d.%d,%81920^\r\n", buffertext2, 如果用户受骗打开了SSA文件中的超长字幕的话，就可能触发这个溢出，导致执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------...

GLSA-200804-25 : VLC: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200804-25 VLC: User-assisted execution of arbitrary code Multiple vulnerabilities were found in VLC: Luigi Auriemma discovered that the stack-based buffer overflow when reading subtitles, which has been reported as CVE-2007-6681 i...

CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

CVE-2008-1769

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...

CVE-2008-1769

VLC (before 0.8.6f) is affected by CVE-2008-1769 due to a crafted Cinepak file that triggers an out-of-bounds memory access in the Cinepak codec, causing a denial of service. The OpenVAS/OpenBSD/Debian entries corroborate that this vulnerability can be triggered remotely via a crafted Cinepak str...

CVE-2008-1768

CVE-2008-1768 affects VLC media player prior to 0.8.6f. The vulnerability arises from multiple integer overflows in the MP4 demuxer, Real demuxer, and Cinepak codec, which can trigger a buffer overflow and cause a remote attack to crash the player (DoS). Related advisories confirm these problems ...

CVE-2008-1769

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...

CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

CVE-2008-1769: Undefined Security Weakness

VLC before 0.8.6f allow remote attackers to cause a denial of service crash via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption...

CVE-2008-1768: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

VLC: User-assisted execution of arbitrary code

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities were found in VLC: Luigi Auriemma discovered that the stack-based buffer overflow when reading subtitles, which has been reported as CVE-2007-6681 in GLSA 200803-13, was not properly fixed...

GLSA-200804-17 : Speex: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200804-17 Speex: User-assisted execution of arbitrary code oCERT reported that the Speex library does not properly validate the 'mode' value it derives from Speex streams, allowing for array indexing vulnerabilities inside multipl...