VideoLAN VLC Media Player PNG Code Execution (CVE-2012-5470)

A buffer overread vulnerability has been reported in VideoLAN VLC Media Player...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

CVE-2012-0023

CVE-2012-0023 is a confirmed VLC vulnerability. Affected VLC versions range from 0.9.0 to 1.1.12 and contain a double-free bug in the get_chunk_header function of modules/demux/ty.c. An attacker can supply a specially crafted TiVo TY file to cause a crash or remote code execution. Several OpenVAS...

VLC Media Player 读访问冲突任意代码执行漏洞(CVE-2012-5470)

CVE ID:CVE-2012-5470 VideoLAN VLC media player是一款媒体播放程序。 VideoLAN VLC媒体播放器libpngplugin插件存在安全漏洞，允许攻击者构建特制的PNG文件，诱使用户解析，可使应用程序崩溃。 0 VLC media player 2.0.3 厂商解决方案 VideoLAN VLC media player 2.0.4已经修复此漏洞，建议用户下载使用： http://www.videolan.org/vlc/releases/2.0.4.html...

DEBIAN-CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

Code injection

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

Heap overflow

Heap-based buffer overflow in the OggDecodePacket function in the OGG demuxer modules/demux/ogg.c in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted OGG file...

CVE-2012-3377

VLC media player < 2.0.2 is vulnerable to a heap-based buffer overflow in the OGG demuxer. The flaw occurs in the Ogg_DecodePacket function (modules/demux/ogg.c) and can allow a remote attacker to cause a crash (DoS) and potentially execute arbitrary code via a crafted OGG file. Affected produ...

VLC Media Player 'OGG'文件远程堆缓冲区溢出漏洞

BUGTRAQ ID: 54345 CVE ID: CVE-2012-3377 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC Media Player 2.0.2在处理OGG容器文件时，"OggDecodePacket"函数modules/demux/ogg.c存在边界错误，通过特制的OGG文件可造成堆缓冲区溢出，执行任意代码。 0 VideoLAN VLC Media Player 2.x 厂商补丁： VideoLAN -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

VideoLAN VLC Media Player MMS URI Stack Overflow

Added: 05/09/2012 CVE: CVE-2012-1775 BID: 53391 OSVDB: 80188 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VLC Player versions 2.0.0 and lower do not properly validate the hostname when accessing MMS URIs. An overly long...

VideoLAN VLC Media Player MMS URI Stack Overflow

Added: 05/09/2012 CVE: CVE-2012-1775 BID: 53391 OSVDB: 80188 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VLC Player versions 2.0.0 and lower do not properly validate the hostname when accessing MMS URIs. An overly long...

VideoLAN VLC Media Player MMS URI Stack Overflow

Added: 05/09/2012 CVE: CVE-2012-1775 BID: 53391 OSVDB: 80188 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VLC Player versions 2.0.0 and lower do not properly validate the hostname when accessing MMS URIs. An overly long...

VideoLAN VLC Media Player MMS URI Stack Overflow

Added: 05/09/2012 CVE: CVE-2012-1775 BID: 53391 OSVDB: 80188 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem VLC Player versions 2.0.0 and lower do not properly validate the hostname when accessing MMS URIs. An overly long...

DEBIAN-CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

Denial of service

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...