VLC_CVE-2021-25801_Analysis

CVE-2021-25801 Analysis The vulnerability stems from a failure to throughly check the type of chunk being passed to Parseindx when attempting to read a sub indx chunk, pointed to by a valid super indx chunk. root@kitploit: else if pindx-iindextype == AVIINDEXOFINDEXES //this is the expected value...

The vulnerability of the __Parse_indx component in the VLC Media Player allows a attacker to access confidential data and also cause a service failure.

The vulnerability of the Parseindx component in the VLC Media Player lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a specially created .avi file...

VideoLAN VLC Buffer Overflow Vulnerability (CNVD-2021-62883)

VideoLAN VLC is an open source cross-platform multimedia player and framework that can play most multimedia files, as well as DVDs, audio CDs, VCDs and various streaming protocols.The Parseindx component in VideoLAN VLC version 3.0.11 suffers from a buffer overflow vulnerability that can be...

CVE-2021-25801

A buffer overflow vulnerability in the Parseindx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file...