2518 matches found
Buffer overflow
Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...
CVE-2011-1087
Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...
CVE-2011-1087
CVE-2011-1087 is a VLC Media Player bookmark-creation buffer overflow vulnerability affecting VLC 1.0.5 (Linux/Windows as per OpenVAS entries). A crafted .mp3 played during bookmark creation can cause memory corruption, leading to a denial of service or potentially arbitrary code execution. The O...
CVE-2011-1087
Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation...
libmodplug <= 0.8.8.2 .abc Stack-Based Buffer Overflow PoC
Exploit for linux platform in category dos / poc include include include / libmodplug = 0.8.8.2 .abc stack-based buffer overflow poc http://modplug-xmms.sourceforge.net/ by: epiphant this exploits one of many overflows in loadabc.cpp lol vlc media player uses libmodplug greets: defrost, babi,...
NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write
LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...
NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write
LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...
NGS00068 Patch Notification: LibAVCodec AMV Out of Array Write
LibAVCodec AMV Out of Array Write 27/04/2011 Dominic Chell of NGS Secure has discovered a high risk vulnerability in LibAVCodec. Opening a malformed AMV file can result in an out of array write and potentially arbitrary code execution when using this library. Whilst the vulnerability may affect...
FreeBSD : VLC -- Heap corruption in MP4 demultiplexer (6a4bfe75-692a-11e0-bce7-001eecdd401a)
VideoLAN project reports : When parsing some MP4 MPEG-4 Part 14 files, insufficient buffer size might lead to corruption of the heap. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...
VLC mediaplayer buffer overflow
Heap oveflow on MP4 parsing...
[SECURITY] [DSA 2218-1] vlc security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2218-1 [email protected] http://www.debian.org/security/ Nico Golde April 12, 2011 http://www.debian.org/security/faq -...
VLC Media Player < 1.1.9 Multiple Vulnerabilities
The version of VLC media player installed on the remote host is earlier than 1.1.9. Such versions are affected by multiple vulnerabilities: - A heap based buffer overflow exists in the function 'MP4ReadBoxskcr' in 'modules/demux/mp4/libmp4.c'. This issue can be triggered when parsing of a malicio...
VLC Media Player 'MP4'堆缓冲区溢出漏洞
Bugtraq ID: 47293 VLC Media Player是一款流行的多媒体播放程序。 modules/demux/mp4/libmp4.c提供的"MP4ReadBoxskcr"函数存在错误,远程攻击者可以构建恶意MP4文件,诱使用户解析,触发缓冲区溢出,成功利用漏洞可以以应用程序安全上下文执行任意代码。 VideoLAN VLC media player 1.1.8 厂商解决方案 VideoLAN VLC media player 1.1.9已经修复此漏洞,建议用户下载使用: http://www.videolan.org/...
Debian DSA-2218-1 : vlc - heap-based buffer overflow
Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially...
[SECURITY] [DSA 2218-1] vlc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2218-1 [email protected] http://www.debian.org/security/ Nico Golde April 12, 2011 http://www.debian.org/security/faq -...
VLC Media Player < 1.1.9 Heap Corruption Vulnerability (deprecated)
Binary data 5883.prm...
VLC Media Player < 1.1.9 Heap Corruption Vulnerability
Binary data 801170.prm...
DSA-2218-1 vlc - heap-based buffer overflow
Bulletin has no description...
VideoLAN Issues Security Advisory
VideoLAN has issued a security advisory to alert users of a vulnerability affecting VLC Media Player versions 1.0.0 through 1.1.8. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators...
VideoLAN VLC Media Player 1.1.8 - ModPlug ReadS3M Stack Buffer Overflow (Metasploit)
$Id: vlcmodplugs3m.rb 12282 2011-04-08 15:48:53Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...