528 matches found
CVE-2007-6683: Undefined Security Weakness
The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...
CVE-2008-0295
Heap-based buffer overflow in modules/access/rtsp/realsdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service crash or execute arbitrary code via long Session Description Protocol SDP data...
CVE-2008-0295
CVE-2008-0295 is a heap-based buffer overflow in VLC's RTSP/ SDP handling (modules/access/rtsp/real_sdpplin.c) that can be triggered by a malicious RTSP stream data, potentially allowing remote code execution or crash. The related OpenVAS/Gentoo/Debian advisories confirm VLC 0.8.6-era releases ar...
CVE-2008-0295: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in modules/access/rtsp/realsdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service crash or execute arbitrary code via long Session Description Protocol SDP data...
CVE-2008-0296: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the libaccessrealrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service application crash or execute arbitrary code via a long string...
Design/Logic Flaw
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...
CVE-2007-6262
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...
CVE-2007-6262
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...
CVE-2007-6262: Improper Restriction of Operations within the Bounds of a Memory Buffer
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...
CVE-2007-3468
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...
Integer overflow
Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...
CVE-2007-3467
Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...
CVE-2007-3468
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...
CVE-2007-3467
CVE-2007-3467 affects VideoLAN VLC Media Player (pre-0.8.6c) due to an integer overflow in the WAV processing path. The vulnerable code is the __status_Update function in stats.c, which can crash the player when it processes a WAV file with a large sample rate, enabling a remote DoS. Connected so...
CVE-2007-3468: Undefined Security Weakness
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...
CVE-2007-3467: Undefined Security Weakness
Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...
CVE-2007-3316
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...
CVE-2007-3316
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...
CVE-2007-3316: Undefined Security Weakness
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...