UBUNTU-CVE-2014-9627

The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large bo...

PT-2015-3378

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions prior to 2.1.6 Description The issue is related to an integer truncation in the MP4 Demuxer of the VideoLAN VLC media player. This can be exploited by remote attackers to cause a denial of service or possibly...

PT-2015-3379

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions prior to 2.1.6 Description The issue is related to errors in checking the length of string containers in the MP4 demultiplexer of the VideoLAN VLC media player. Exploitation of this issue may allow a remote...

PT-2015-3377

Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 2.1.6 Description The issue is related to an integer underflow in the MP4 demuxer, specifically in the MP4 ReadBox String function. This can be exploited by remote attackers using a specially crafted MP4 file...

DEBIAN-CVE-2011-1684

Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...

CVE-2011-1684

Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...

Integer overflow

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...