Design/Logic Flaw

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

CVE-2013-6283

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

CVE-2013-6283: Improper Input Validation

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

PT-2013-5987

Name of the Vulnerable Software and Affected Versions VideoLAN VLC Media Player versions 2.0.8 and earlier Description The issue allows remote attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. This can be achieved by...

ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service (PoC)

ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service PoC Exploit Title: Denial of service in ASF demux for VLC 2.0.X Date: 01/10/2013 Exploit Author: Pedro Ribeiro Vendor Homepage: http://www.videolan.org/vlc/ Software Link: http://www.videolan.org/vlc/download Version: 2.0.0 - 2.0.8...

CVE-2013-4388

Buffer overflow in the mp4a packetizer modules/packetizer/mpeg4audio.c in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2013-4388

CVE-2013-4388 affects VideoLAN VLC Media Player via the mp4a packetizer (modules/packetizer/mpeg4audio.c). The vulnerability is a buffer overflow that can cause a crash and, potentially, arbitrary code execution. Connected advisories confirm VLC up to 2.0.8 vulnerable; upstream fix implemented in...

CVE-2013-4388: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the mp4a packetizer modules/packetizer/mpeg4audio.c in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

DEBIAN-CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

UBUNTU-CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

Integer overflow

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1954

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

PT-2013-4251 · Videolan · Vlc Media Player

Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 2.0.7 Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file. This could involve an integer overflow, out-of-bounds read, ...

CVE-2012-5855: Undefined Security Weakness

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2013-3245: Improper Restriction of Operations within the Bounds of a Memory Buffer

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

CVE-2013-1954: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ASF Demuxer modules/demux/asf/asf.c in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read...

PT-2013-3442

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions 2.0.4 and earlier Description The issue is related to multiple buffer overflows in the VideoLAN VLC media player, which can be exploited by remote attackers to cause a denial of service crash and potentially...

CVE-2013-1868: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via vectors related to the 1 freetype renderer and 2 HTML subtitle parser...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...