DLL_Injection_On_VLC

DLL-инъекция и CVE-2010-3124 Обзор 🌱 Этот проект исследует тему DLL-инъекции Dynamic Link Library и конкретно фокусируется на CVE-2010-3124. CVE-2010-3124 относится к уязвимости недоверенного пути поиска, обнаруженной в VLC Media Player версии 1.1.3 и ранее. Вот ключевые моменты, которые помогут...

VLC_CVE-2021-25801_Analysis

Анализ CVE-2021-25801 Уязвимость возникает из-за отсутствия тщательной проверки типа чанка, передаваемого в Parseindx при попытке чтения суб-индексного чанка, на который указывает корректный супер-индексный чанк. else if pindx-iindextype == AVIINDEXOFINDEXES //это ожидаемое значение для...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Эксплойт Ну, это просто старая уязвимость с номером CVE-2008-4654. Эта уязвимость вызвана нехваткой памяти в строке 1650 файла modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; Когда я скачал эксплойт с других сайтов, я обнаружил, что он некорректно работает на моей...

CVE-2008-4654

CVE-2008-4654 Полнофункциональный эксплойт для уязвимости переполнения буфера на стеке CVE-2008-4654 в VideoLan's VLC Media Player 0.9.4 при обработке TiVo-файлов. Он нацелен на 32-битный бинарник, работающий на 64-битной системе Windows, и использует WOW64-еггхантер для обхода ограниченного...

CVE-2008-4654

CVE-2008-4654 PoC-эксплойт для уязвимости CVE-2008-4654 VLC Media Player: стековый переполнение буфера через расширение файла TiVo Ty. Использование Запустите скрипт, имея в той же папке образец файла .ty+. Файл .ty+ будет изменён для выполнения пейлоада при открытии в VLC Media Player. Файл,...

Linux Distros Unpatched Vulnerability : CVE-2026-102875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives...

CVE-2026-102875

A flaw was found in VLC media player. An attacker can achieve arbitrary code execution by convincing a user to open a maliciously crafted skin archive. Because the theme loader fails to properly validate member file paths within the archive, files containing directory traversal sequences can be...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

DEBIAN-CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

EUVD-2026-89410

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875

VLC media player before version 3.0.24 is vulnerable to a path traversal vulnerability within the skins2 ThemeLoader . The root cause is a failure to validate member names in .vlt skin archives , which allows an attacker to craft malicious skin files containing path traversal sequences. This can ...

[SECURITY] Fedora 44 Update: vlc-3.0.24-1.fc44

VLC media player is a highly portable multimedia player and multimedia framew ork capable of reading most audio and video formats as well as DVDs, Audio CDs VC Ds, and various streaming protocols. It can also be used as a media converter or a server to stream in uni-cast or multi-cast in IPv4 or...

Fedora 44 : vlc (2026-ad90eab763)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ad90eab763 advisory. VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP plug...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 – переполнение буфера в ty.c Разница...

VLC_CVE-2021-25804_Analysis

AVI 파일은 여러 개의 트랙을 가질 수 있습니다. 예를 들어 오디오 트랙과 비디오 트랙이 있습니다. 임의 개수의 트랙을 파싱하려면 VLC는 먼저 주어진 트랙이 완료되었고 재생 가능한지 확인해야 합니다. 이를 위해 두 개의 변수가 설정됩니다. 둘 다 이름이 itrack입니다. 변수 psys는 우리의 목적에 있어 avi 파일을 나타냅니다. 따라서 완료되고 재생 가능한 트랙을 참조하는 데 사용되는 "공식" itrack 변수는 psys-itrack입니다. 이 변수는 다음 매크로로 초기화됩니다: TABINITpsys-itrack,...

[SECURITY] [DSA 6515-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6515-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2026 https://www.debian.org/security/faq -...

Debian dsa-6515 : libvlc-bin - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6515 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6515-1 [email protected] https://www.debian.org/securit...