VideoLAN VLC axvlc.dll ActiveX Crafted Parameter Remote Code Execution (CVE-2007-6262)

VLC media player is a free multimedia player for various audio and video formats as well as DVDs, VCDs, and various streaming protocols. This vulnerability is due to recursive object release as a result from flaws in the VideoLAN VLC ActiveX Control. To trigger this issue, an attacker may create ...

CVE-2007-6682: Undefined Security Weakness

Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter...

CVE-2007-6681: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a 1 MicroDvd, 2 SSA, and 3 Vplayer file...

CVE-2007-6683

VLC 0.8.6d is affected by CVE-2007-6683 due to insecure argument validation that can allow remote overwriting of files writable by the user when opening a malicious M3U playlist or MP3 with a crafted EXTVLCOPT or demuxdump-file filename. Descriptions across sources (Debian GLSA/DSA, OpenVAS, Gent...

CVE-2008-0295

Heap-based buffer overflow in modules/access/rtsp/realsdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service crash or execute arbitrary code via long Session Description Protocol SDP data...

CVE-2008-0296

Heap-based buffer overflow in the libaccessrealrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service application crash or execute arbitrary code via a long string...

Heap overflow

Heap-based buffer overflow in the libaccessrealrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service application crash or execute arbitrary code via a long string...

CVE-2008-0296

CVE-2008-0296 is a vulnerability in VLC Media Player up to version 0.8.6d on Windows, caused by a heap-based buffer overflow in the libaccess_realrtsp plugin during RTSP SDP handling. A malicious RTSP stream could either crash the application (DoS) or enable arbitrary code execution on the host. ...

CVE-2008-0295

CVE-2008-0295 is a heap-based buffer overflow in VLC's RTSP/ SDP handling (modules/access/rtsp/real_sdpplin.c) that can be triggered by a malicious RTSP stream data, potentially allowing remote code execution or crash. The related OpenVAS/Gentoo/Debian advisories confirm VLC 0.8.6-era releases ar...

CVE-2008-0295: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in modules/access/rtsp/realsdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service crash or execute arbitrary code via long Session Description Protocol SDP data...

CVE-2008-0296: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the libaccessrealrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service application crash or execute arbitrary code via a long string...

VLC Media Player sdpplin_parse() RTSP堆溢出漏洞

BUGTRAQ ID: 27221 VLC Media Player是一款免费的媒体播放器。 VLC在处理畸形格式的数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 VLC所使用的旧版Xine库在modules/access/rtsp/realsdpplin.c文件中存在堆溢出漏洞： sdpplint sdpplinparsechar data sdpplint desc = mallocsizeofsdpplint; sdpplinstreamt stream; char buf=malloc3200; char decoded=malloc3200; ... whil...

Buffer-overflow and format string in VideoLAN VLC 0.8.6d

Luigi Auriemma Application: VideoLAN VLC http://www.videolan.org Versions: = 0.8.6d Platforms: Windows, Mac, BSD, nix and more Bugs: A buffer-overflow in the handling of the subtitles originally found by Michal Luczaj B format string in the web interface Exploitation: A local B remote Date: 24 De...

Design/Logic Flaw

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262

VideoLAN VLC Vulnerability CVE-2007-6262 affects the ActiveX control axvlc.dll in VLC 0.8.6 before 0.8.6d. The three functions addTarget, getVariable, and setVariable do not validate parameters, leading to a bad initialized pointer and enabling remote code execution via crafted arguments (recursi...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262: Improper Restriction of Operations within the Bounds of a Memory Buffer

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

DSA-1332-1 vlc

Bulletin has no description...

CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...