CVE-2014-9743: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the httpdHtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info...

VideoLAN VLC Media Player Installed (Mac OS X)

Binary data macosxvlcinstalled.nbin...

VideoLAN VLC for OS X Web Plugin Installed (Mac OS X)

Binary data macosxvlcplugininstalled.nbin...

VideoLAN libbluray Directory Traversal Vulnerability

VideoLAN VLC media player is the multimedia player of VideoLAN program. A directory traversal vulnerability exists in VideoLAN libbluray due to the program failing to adequately filter user-supplied input. A remote attacker could use a directory traversal sequence of specially crafted requests '...

VLC Media Player Multiple Vulnerabilities -02 (Jan 2015) - Linux

VLC Media player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videolan:vlcmediaplayer";...

VideoLAN VLC Media Player 2.1.5 - DEP Access Violation

Title : VLC Player 2.1.5 DEP Access Violation Vulnerability Discoverer: Veysel HATAS @muh4f1z Web page : www.binarysniper.net Vendor : VideoLAN VLC Project Test: Windows XP SP3 Status: Fixed Severity : High CVE ID : CVE-2014-9597 NIST: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-959...

CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

Code injection

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

UBUNTU-CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

CVE-2014-9597

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

CVE-2014-9597

The CVE-2014-9597 entry refers to VideoLAN VLC media player 2.1.5, where the flaw is in the picture_pool_Delete function (misc/picture_pool.c). A crafted FLV file can lead to remote code execution or a denial of service (DEP violation and crash) on affected versions. The connected Nessus/OpenVAS ...

CVE-2014-9598: Improper Input Validation

The pictureRelease function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service write access violation via a crafted M2V file...

CVE-2014-9597: Improper Input Validation

The picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service DEP violation and application crash via a crafted FLV file...

PT-2015-3378

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions prior to 2.1.6 Description The issue is related to an integer truncation in the MP4 Demuxer of the VideoLAN VLC media player. This can be exploited by remote attackers to cause a denial of service or possibly...

PT-2015-3379

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions prior to 2.1.6 Description The issue is related to errors in checking the length of string containers in the MP4 demultiplexer of the VideoLAN VLC media player. Exploitation of this issue may allow a remote...

Memory Corruption Bugs Found in VLC Media Player

There are two memory corruption vulnerabilities in some versions of the VLC open-source media player that can allow an attacker to run arbitrary code on vulnerable machines. Neither one of the vulnerabilities has been fixed by VideoLAN, the organization that maintains VLC. Security researcher...

VLC Media Player Multiple Buffer Overflow Vulnerabilities-01 (Jan 2015) - Windows

VLC media player is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player Multiple Buffer Overflow Vulnerabilities-01 (Jan 2015) - Linux

VLC media player is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player 'real_get_rdt_chunk' BOF Vulnerability-02 (Jan 2015) - Linux

VLC media player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...