326 matches found
CVE-2013-6934
CVE-2013-6934 affects VLC Media Player via the Live555 liblivemedia RTSP implementation. The issue arises in parseRTSPRequestString: a space at the beginning of an RTSP message can trigger an integer underflow, an infinite loop, and a buffer overflow, potentially crashing the application or enabl...
CVE-2013-6934
The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers a...
CVE-2013-6934
The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers a...
Design/Logic Flaw
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...
CVE-2013-6283
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...
ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service (PoC)
ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service PoC Exploit Title: Denial of service in ASF demux for VLC 2.0.X Date: 01/10/2013 Exploit Author: Pedro Ribeiro Vendor Homepage: http://www.videolan.org/vlc/ Software Link: http://www.videolan.org/vlc/download Version: 2.0.0 - 2.0.8...
CVE-2013-4388
CVE-2013-4388 affects VideoLAN VLC Media Player via the mp4a packetizer (modules/packetizer/mpeg4audio.c). The vulnerability is a buffer overflow that can cause a crash and, potentially, arbitrary code execution. Connected advisories confirm VLC up to 2.0.8 vulnerable; upstream fix implemented in...
CVE-2013-4388
Buffer overflow in the mp4a packetizer modules/packetizer/mpeg4audio.c in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...
DEBIAN-CVE-2013-3245
plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...
Integer overflow
plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...
UBUNTU-CVE-2012-5855
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...
PT-2013-4251 · Videolan · Vlc Media Player
Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 2.0.7 Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file. This could involve an integer overflow, out-of-bounds read, ...
CVE-2012-0023
Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...
VLC Media Player 读访问冲突任意代码执行漏洞(CVE-2012-5470)
CVE ID:CVE-2012-5470 VideoLAN VLC media player是一款媒体播放程序。 VideoLAN VLC媒体播放器libpngplugin插件存在安全漏洞，允许攻击者构建特制的PNG文件，诱使用户解析，可使应用程序崩溃。 0 VLC media player 2.0.3 厂商解决方案 VideoLAN VLC media player 2.0.4已经修复此漏洞，建议用户下载使用： http://www.videolan.org/vlc/releases/2.0.4.html...
Code injection
libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...
Heap overflow
Heap-based buffer overflow in the OggDecodePacket function in the OGG demuxer modules/demux/ogg.c in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted OGG file...
Denial of service
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...
VideoLAN VLC MKV Memory Corruption (CVE-2011-0531)
A memory corruption vulnerability has been reported in VideoLAN VLC player...
DEBIAN-CVE-2012-1776
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...