VLC 3.0.x < 3.0.2 Heap Use-After-Free / Remote Code Execution Vulnerability

The version of VLC media player installed on the remote host is earlier than 3.0.2. It is, therefore, affected by a heap use-after-free vulnerability which could result in a remote code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111518;...

CVE-2018-11516

The vlcdemuxchainedDelete function in input/demuxchained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service heap corruption and application crash or possibly have unspecified other impact via a crafted .swf file...

CVE-2018-11516

The vlcdemuxchainedDelete function in input/demuxchained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service heap corruption and application crash or possibly have unspecified other impact via a crafted .swf file...

CVE-2018-11516

CVE-2018-11516 affects VideoLAN VLC media player 3.0.1, where the vlc_demux_chained_Delete function in input/demux_chained.c can be triggered by a crafted .swf file to cause a denial of service via heap corruption and application crash. Some sources also describe a potential for remote code execu...

KLA11355 Use after free vulnerability in VLC media player

An use after free vulnerability was found in VLC media player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Security Advisory 1801 Related products VLC-media-player CVE list CVE-2018-11516 high Solution Update to the latest version Download VLC...