CVE-2017-8313

VLC prior to version 2.2.5 is affected by CVE-2017-8313: a heap out-of-bounds read in ParseJSS due to a missing string-termination check, exploitable via crafted subtitle files and potentially crashing the process. Related advisories also describe other CVEs (e.g., CVE-2017-8310/8311) affecting V...

CVE-2017-8310

CVE-2017-8310 affects VideoLAN VLC 2.2.x. A heap out-of-bounds read in CreateHtmlSubtitle due to missing string termination checks allows reading memory beyond what’s allocated, potentially crashing the process (denial of service) when processing crafted subtitles files. Public references in Debi...

CVE-2017-8310

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process causing a denial of service via a crafted subtitles file...

CVE-2017-8312

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

PT-2017-18278

Name of the Vulnerable Software and Affected Versions VideoLAN VLC versions prior to 2.2.5 Description The issue is related to a heap out-of-bound read in the ParseJSS function. This occurs due to a missing check of string termination, allowing attackers to read data beyond allocated memory. As a...

PT-2017-18277

Name of the Vulnerable Software and Affected Versions VideoLAN VLC versions prior to 2.2.5 Description The issue is related to a potential heap-based buffer overflow in the ParseJSS function. This occurs when the function skips the NULL terminator in an input string, allowing attackers to execute...

PT-2017-18276

Name of the Vulnerable Software and Affected Versions VideoLAN VLC versions 2.2.x Description The issue is related to a heap out-of-bound read in the CreateHtmlSubtitle function, caused by a missing check of string termination. This allows attackers to read data beyond allocated memory, potential...

KLA11023 Multiple vulnerabilities in VideoLAN VLC Media Player

Multiple serious vulnerabilities have been found in VideoLAN VLC Media Player. Malicious users can exploit these vulnerabilities to cause a denial of service or execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap out-of-bound read in CreateHtmlSubtitle and in ParseJSS can...

PT-2017-3885

Name of the Vulnerable Software and Affected Versions VideoLAN VLC affected versions not specified Description The issue is related to a heap out-of-bound read in the ParseJSS component of VideoLAN VLC, caused by a missing check of string length. This allows attackers to read heap uninitialized...

CVE-2017-8311: Improper Restriction of Operations within the Bounds of a Memory Buffer

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file...

CVE-2017-8312: Out-of-bounds Read

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

CVE-2017-8310: Out-of-bounds Read

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process causing a denial of service via a crafted subtitles file...

CVE-2017-8313: Out-of-bounds Read

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file...

VLC Media Player 'audio.c' Heap-Based Buffer Overflow Vulnerability - Windows

VLC media player is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Denial of service

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

DEBIAN-CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VLC media player, affected up to versions before 2.1.5, is affected by CVE-2014-6440 due to a heap overflow in the transcode module that could allow remote code execution or a denial of service. Public references in OpenVAS/Gentoo advisories confirm a heap-based overflow/remote code execution vec...