CVE-2017-8312

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

CVE-2017-8311

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file...

CVE-2017-8313

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file...

CVE-2017-8312

CVE-2017-8312 affects VideoLAN VLC (2.2.x) due to a heap out-of-bounds read in ParseJSS caused by a missing string-length check in subtitle parsing. A crafted subtitles file can read heap-uninitialized data, with potential crash or code execution. Public advisories (Arch Linux ASA-201706-1, Debia...

CVE-2017-8311

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file...

CVE-2017-8312

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

CVE-2017-8312: Out-of-bounds Read

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

CVE-2017-8311: Improper Restriction of Operations within the Bounds of a Memory Buffer

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file...

CVE-2017-8313: Out-of-bounds Read

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file...

PT-2017-18278

Name of the Vulnerable Software and Affected Versions VideoLAN VLC versions prior to 2.2.5 Description The issue is related to a heap out-of-bound read in the ParseJSS function. This occurs due to a missing check of string termination, allowing attackers to read data beyond allocated memory. As a...

PT-2017-3885

Name of the Vulnerable Software and Affected Versions VideoLAN VLC affected versions not specified Description The issue is related to a heap out-of-bound read in the ParseJSS component of VideoLAN VLC, caused by a missing check of string length. This allows attackers to read heap uninitialized...

PT-2017-18277

Name of the Vulnerable Software and Affected Versions VideoLAN VLC versions prior to 2.2.5 Description The issue is related to a potential heap-based buffer overflow in the ParseJSS function. This occurs when the function skips the NULL terminator in an input string, allowing attackers to execute...

VLC ParseJSS Null Skip Subtitle Remote Code Execution

A remote code execution vulnerability exists in VLC Subtitles mechanism. The vulnerability is due to the way VLC parses subtitle files. Successful exploitation could result in arbitrary code execution on the client machine...