CVE-2010-2937

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service application crash via a crafted media file...

CVE-2010-2937: Improper Input Validation

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service application crash via a crafted media file...

VideoLAN Releases a Security Advisory for VLC Media Player

VideoLAN has released a security advisory to address a vulnerability in VLC Media Player. This vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. The updated release also addresses additional issues that could result in a denial-of-service attack...

VideoLAN VLC Renamed Zip File Handling Code Execution

VLC media player is a free multimedia player for various audio and video formats as well as DVDs, VCDs, and various streaming protocols. A memory corruption vulnerability exists in VideoLAN's VLC Media Player. The vulnerability is due to an uninitialized pointer dereference while handling zip fil...

Critical Flaws Haunt VLC Media Player

VideoLAN has released a security advisory to address multiple vulnerabilities in the VLC Media Player. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. According to a VideoLAN advisory, the flaws occur when the media player attempts to...

VideoLAN Releases Security Advisory for VLC Media Player

VideoLAN has released a security advisory to address multiple vulnerabilities in VLC Media Player. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review VideoLAN security advisory...

VideoLAN VLC Media Player 1.0.x - Bookmark Creation Buffer Overflow

VideoLAN VLC Media Player 1.0.x - Bookmark Creation Buffer Overflow source: https://www.securityfocus.com/bid/38569/info VLC Media Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to...

VideoLAN VLC Media Player 1.0.x - Bookmark Creation Buffer Overflow

source: https://www.securityfocus.com/bid/38569/info VLC Media Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attac...

VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflow

$Id: vlcsmburi.rb 8475 2010-02-13 06:58:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow (CVE-2009-2484)

A buffer overflow vulnerability has been reported in VideoLAN VLC Media Player. The vulnerability is due to a boundary error. Remote attackers can exploit this vulnerability, for example, by enticing target users to open a playlist file having an overly long "smb://" URI that will cause an stack...

VideoLAN VLC Media Player SMB URI Invalid Free

VLC Media Player is an open source multimedia player maintained by VideoLAN.org. It can play many audio and video formats MPEG, DivX, ogg, Wave etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in th...

VideoLAN VLC Media Player MP4_BoxDumpStructure Buffer Overflow

VLC Media Player is an open source multimedia player. It can play many audio and video formats as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in the form of plugins bundled with the player as shared...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364

VLC Media Player 0.8.6 is affected by a stack-based buffer overflow when processing an ogg file containing a crafted Advanced SubStation Alpha Subtitle (.ass) file, likely in the Dialogue field. This allows user-assisted remote code execution. Multiple security feeds (OpenVAS and NVD) corroborate...

CVE-2010-0364

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

CVE-2010-0364: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...

VideoLAN VLC Media Player 1.0.3 - .asx Denial of Service (PoC)

VideoLAN VLC Media Player 1.0.3 - .asx Denial of Service PoC !/user/bin/perl Author: D3V!L FUCKER Tested on: windows vista sp0 Code : my $file= "crash.asx"; my $boom= "http://"."AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" x 500000; open$FILE,"$file"; print $FILE...

VideoLAN VLC Media Player 1.0.3 - '.asx' Denial of Service (PoC)

!/user/bin/perl Author: D3V!L FUCKER Tested on: windows vista sp0 Code : my $file= "crash.asx"; my $boom= "http://"."AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" x 500000; open$FILE,"$file"; print $FILE "$boom"; close$FILE; print "Done..!\n";...

VideoLAN VLC Media Player MP4_BoxDumpStructure Buffer Overflow

Added: 12/07/2009 BID: 36439 OSVDB: 58217 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability exists in VideoLAN VLC media player due to an error when an overly deep box structure in ".mp4" files....