CVE-2007-6682

CVE-2007-6682 affects VLC 0.8.6d with a format string vulnerability in the httpd_FileCallBack function (network/httpd.c). The vulnerability allows remote, unauthenticated attackers to execute arbitrary code via format string specifiers in the Connection header of HTTP requests. Public references ...

Debian Security Advisory DSA 1332-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1332-1. OpenVAS Vulnerability Test $Id: deb13321.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1332-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-6681

CVE-2007-6681 affects VideoLAN VLC 0.8.6d, due to a stack-based buffer overflow in the subtitle demux path (modules/demux/subtitle.c) when parsing long subtitle formats (MicroDvd, SSA, VPlayer). This remote code execution vulnerability was discussed in VLC-related GLSA advisories (GLSA 200803-13 ...

CVE-2007-6683

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...

CVE-2008-0296

Heap-based buffer overflow in the libaccessrealrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service application crash or execute arbitrary code via a long string...

Heap overflow

Heap-based buffer overflow in the libaccessrealrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service application crash or execute arbitrary code via a long string...

CVE-2008-0295

Heap-based buffer overflow in modules/access/rtsp/realsdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service crash or execute arbitrary code via long Session Description Protocol SDP data...

CVE-2008-0295

CVE-2008-0295 is a heap-based buffer overflow in VLC's RTSP/ SDP handling (modules/access/rtsp/real_sdpplin.c) that can be triggered by a malicious RTSP stream data, potentially allowing remote code execution or crash. The related OpenVAS/Gentoo/Debian advisories confirm VLC 0.8.6-era releases ar...

CVE-2008-0296

CVE-2008-0296 is a vulnerability in VLC Media Player up to version 0.8.6d on Windows, caused by a heap-based buffer overflow in the libaccess_realrtsp plugin during RTSP SDP handling. A malicious RTSP stream could either crash the application (DoS) or enable arbitrary code execution on the host. ...

VLC Media Player sdpplin_parse() RTSP堆溢出漏洞

BUGTRAQ ID: 27221 VLC Media Player是一款免费的媒体播放器。 VLC在处理畸形格式的数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 VLC所使用的旧版Xine库在modules/access/rtsp/realsdpplin.c文件中存在堆溢出漏洞： sdpplint sdpplinparsechar data sdpplint desc = mallocsizeofsdpplint; sdpplinstreamt stream; char buf=malloc3200; char decoded=malloc3200; ... whil...

Buffer-overflow and format string in VideoLAN VLC 0.8.6d

Luigi Auriemma Application: VideoLAN VLC http://www.videolan.org Versions: = 0.8.6d Platforms: Windows, Mac, BSD, nix and more Bugs: A buffer-overflow in the handling of the subtitles originally found by Michal Luczaj B format string in the web interface Exploitation: A local B remote Date: 24 De...

Design/Logic Flaw

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262

VideoLAN VLC Vulnerability CVE-2007-6262 affects the ActiveX control axvlc.dll in VLC 0.8.6 before 0.8.6d. The three functions addTarget, getVariable, and setVariable do not validate parameters, leading to a bad initialized pointer and enabling remote code execution via crafted arguments (recursi...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

DSA-1332-1 vlc

Bulletin has no description...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3468

input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a crafted WAV file that causes an uninitialized inbresamplers variable to be used...

Integer overflow

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

DEBIAN-CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...