Heap Buffer Overflow

vlc:bionic is vulnerable to heap buffer overflow. Due to a flaw in mkv::eventthreadt in VideoLAN VLC media player allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

Heap Buffer Over-read

vlc:bionic is vulnerable to heap buffer over-read. The xiphSplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a double free issue when parsing MKV files caused by zlibdecompressextra in modules/demux/mkv/util.cpp...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists a heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through an integer underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c...

Buffer Overflow

vlc:bionic is vulnerable to buffer overflow. Due to a flaw, it causes a crash which can possibly be further developed into a remote code execution exploit...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a possible use-after-free in the Control function of demux/asf/asf.c...

VLC Media Player < 3.0.11 DoS Vulnerability - Mac OS X

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists as through memory corruption issues...

Denial Of Service (DoS)

VLC is vulnerable to denial of service DoS. The vulnerability exists as an exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in t...

Denial Of Service (DoS)

VLC is vulnerable to denial of service DoS. The vulnerability exists as an exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without...

Arbtirary Code Execution

vlc is vulnerable to arbitrary code execution. A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c allows a remote attacker to cause a denial of service application crash or execute arbitrary code via a malicious H.264 Annex-B video .avi for example file...

PT-2020-6647 · Videolan +3 · Vlc Media Player +3

Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 3.0.11 Description: A buffer overflow vulnerability in the Parse indx component of VideoLAN VLC Media Player allows attackers to cause an out-of-bounds read via a crafted .avi file. This vulnerability is...

PT-2020-6646 · Videolan +3 · Vlc Media Player +3

Name of the Vulnerable Software and Affected Versions: VLC Media Player version 3.0.11 Description: A buffer overflow vulnerability in the AVI ExtractSubtitle component allows attackers to cause an out-of-bounds read via a crafted .avi file. This can be exploited by a remote attacker to gain acce...

VLC < 2.0.4 DoS

A denial of service DoS vulnerability exists in libpngplugin in VLC media player before 2.0.4. Allows remote attackers to cause a denial of service crash via a crafted PNG file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid138899; scriptversion"1.5";...

VLC < 2.0.8 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.0.8. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7 and possibly other versions...

VLC < 2.2.0 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.2.0. It is, therefore, affected by multiple vulnerabilities: - An exploitable Cross-site scripting XSS vulnerability exists in the httpdHtmlError function in network/httpd.c in the web interface in VideoLAN VLC Med...

VLC < 2.2.4 DoS

The version of VLC media player installed on the remote host with version prior to 2.2.4, is affected by a denial of service vulnerability. A buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN allows remote attackers to cause a denial of service crash or possibl...

VLC < 1.1.12 DoS

A denial of service DoS vulnerability exists in VLC media player before 1.1.12. Allows remote attackers to cause a denial of service crash via a long string in an amr file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid138341; scriptversion"1.5";...

MGASA-2020-0272 Updated vlc packages fix security vulnerability

Updated vlc packages fixes security vulnerability: A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted...