CVE-2013-7340: Undefined Security Weakness

VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service memory consumption via a crafted playlist file...

DEBIAN-CVE-2014-1684

The ASFReadObjectfileproperties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service divide-by-zero error and crash via a zero minimum and maximum data packet size in an ASF file...

Denial of service

The ASFReadObjectfileproperties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service divide-by-zero error and crash via a zero minimum and maximum data packet size in an ASF file...

CVE-2014-1684

The ASFReadObjectfileproperties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service divide-by-zero error and crash via a zero minimum and maximum data packet size in an ASF file...

CVE-2014-1684: Undefined Security Weakness

The ASFReadObjectfileproperties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service divide-by-zero error and crash via a zero minimum and maximum data packet size in an ASF file...

CVE-2013-6933

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 space or 2 tab character at the beginning of an...

CVE-2013-6933

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 space or 2 tab character at the beginning of an...

Integer overflow

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 space or 2 tab character at the beginning of an...

CVE-2013-6934

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers a...

CVE-2013-6934

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers a...

CVE-2013-6934

CVE-2013-6934 affects VLC Media Player via the Live555 liblivemedia RTSP implementation. The issue arises in parseRTSPRequestString: a space at the beginning of an RTSP message can trigger an integer underflow, an infinite loop, and a buffer overflow, potentially crashing the application or enabl...

CVE-2013-6933: Improper Restriction of Operations within the Bounds of a Memory Buffer

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 space or 2 tab character at the beginning of an...

CVE-2013-6283

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

Design/Logic Flaw

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

CVE-2013-6283

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

CVE-2013-6283

CVE-2013-6283 affects VideoLAN VLC Media Player 2.0.8 and earlier. A long string in a URL within an M3U file can cause denial of service and potentially allow arbitrary code execution. The vulnerability is documented across multiple feeds (OSV, OpenVAS, Nessus) with a common impact: DoS and possi...

CVE-2013-6283

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

CVE-2013-6283: Improper Input Validation

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in a URL in a m3u file...

PT-2013-5987

Name of the Vulnerable Software and Affected Versions VideoLAN VLC Media Player versions 2.0.8 and earlier Description The issue allows remote attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. This can be achieved by...

ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service (PoC)

ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service PoC Exploit Title: Denial of service in ASF demux for VLC 2.0.X Date: 01/10/2013 Exploit Author: Pedro Ribeiro Vendor Homepage: http://www.videolan.org/vlc/ Software Link: http://www.videolan.org/vlc/download Version: 2.0.0 - 2.0.8...