Integer overflow

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

DEBIAN-CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

CVE-2008-1489

CVE-2008-1489 is an integer overflow in VLC’s MP4 handling (MP4_ReadBox_rdrf in libmp4.c) that can cause a heap-based buffer overflow, potentially crashing or executing code. The VLC GLSA entries indicate this was addressed by upgrading to VLC 0.8.6f (fixed in later 0.8.6x builds). Connected advi...

CVE-2008-1489: Undefined Security Weakness

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

[Full-disclosure] CVE-2008-0073 - MPlayer and VLC "sdpplin_parse()" Array Indexing Vulnerability

Hello, CVE-2008-0073 apply also to MPlayer and VLC. -MPlayer-1.0-rc2, stream/realrtsp/sdpplin.c: 161: desc-streamid=atoibuf; 283: desc-streamstream-streamid=stream; - vlc-0.8.6e, modules/access/rtsp/realsdpplin.c: 141: desc-streamid=atoibuf; 257: desc-streamstream-streamid=stream; With MPlayer: e...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

VLC Media Player network/httpd.c httpd_FileCallBack Function Connection Parameter Format String

The remote host is running VLC, a popular media player application which can have an embedded web server. The remote version of this software is vulnerable to a format string attack when processing a malformed 'Connection:' http header. An attacker can exploit this flaw to execute arbitrary...

VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...

VideoLAN VLC media player multiple security vulnerabilities

Buffer overflow on subtitles parsing, format string vulnerability in Web interface TCP/8080...

VLC highlander bug

The old buffer-overflow in the subtitles handled by VLC has not been fully patched in version 0.8.6e, in fact buffertext2 in ParseSSA is still unchecked: if sscanf s, "Dialogue: ^,,d:d:d.d,d:d:d.d,81920^rn", buffertext2, The funny thing is that my old proof-of-concept was built just to test this...

VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...

vlc086e-overflow.txt

/ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; printf...

VLC Media Player < 0.8.6f Multiple Vulnerabilities (deprecated)

Binary data 4429.prm...

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow / VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; print...

VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n" "ScriptType: v4.00\r\n" "Collisions: Normal\r\n" "V4 Styles\r\n" "Events\r\n"...

VideoLAN VLC Media Player 0.8.6e - Subtitle Parsing Local Buffer Overflow

/ VLC include include char ssaheader= "Script Info\r\n" "Title: VLC version 8.06.c\r\n"; printf"2 version 8.06.d\r\n"; printf"3 version 8.06.e\r\nChose:"; j=getchar; switchj...