CVE-2019-19721

VLC media player

CVE-2019-19721: Off-by-one Error

An off-by-one error in the DecodeBlock function in codec/sdlimage.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service memory corruption via a crafted image file. NOTE: this may be related to the SDLImage product...

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

The vulnerability of the microDNS library used by the Media Player software VideoLAN VLC, related to reading data beyond the buffer in memory, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

The vulnerability of the microDNS library in the VideoLAN VLC media player software allows a hacker to induce a service failure or execute arbitrary code.

The vulnerability of the microDNS library in the VideoLAN VLC media player lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code through a specially crafted request...

The vulnerability of the xiph_SplitHeaders function in the VideoLAN VLC media player software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xiphSplitHeaders function in the VideoLAN VLC media player’s modules/demux/xiph.h file relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the lavc_CopyPicture function in the VideoLAN VLC media player software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lavcCopyPicture function module/codec/avcodec/video.c in the Media Player VideoLAN VLC application is related to a buffer overflow vulnerability in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the SeekPercent function in the VideoLAN VLC media player’s demux/asf.c file allows a hacker to cause a service failure.

The vulnerability of the SeekPercent function in the VideoLAN VLC media player’s demux/asf.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

CVE-2019-13962 avcodec lavc_CopyPicture Heap Buffer Overflow

VLC media player is a free and open-source portable cross-platform media player software developed by the VideoLAN project. VLC is available for desktop operating systems and mobile platforms, such as Android, iOS, iPadOS, Wizen, Windows 10 Mobile, and Windows Phone. It is also available on digit...

VideoLAN VLC Media Player Cross-Site Scripting Vulnerability (CNVD-2020-08120)

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A cross-site...

DEBIAN-CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

UBUNTU-CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

CVE-2013-3564: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...