CVE-2014-9625

The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update...

CVE-2014-9625

CVE-2014-9625 affects VideoLAN VLC media player up to version 2.1.5 (vulnerable before 2.1.6). The root cause is an incorrect cast from a 64-bit integer to a 32-bit integer in the GetUpdateFile function of misc/update.c within the Updater, enabling a crafted update status file to cause a buffer o...