Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2194-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c, resulting in a floating point exception via and allows an attacker to execute arbitrary code via a malicious WMV file...

Heap Buffer Over-read

vlc:bionic is vulnerable to buffer overflows. lavcCopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player has a heap-based buffer over-read because it does not properly validate the width and height...

Information Disclosure

vlc:bionic is vulnerable to information disclosure. The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk cast converts a return value to an unsigned int even if...

Denial Of Service (DoS)

vlc:bionic is vulnerable to denial of service DoS. A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player. As a result, an FPE can be triggered via a crafted CAF file...

Denial Of Service (DoS)

vlc is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A use-after-free in the Control function in demux/mkv/mkv.cpp allows an attacker to execute arbitrary code on the host OS...

Heap Buffer Overflow

vlc:bionic is vulnerable to heap buffer overflow. Due to a flaw in mkv::eventthreadt in VideoLAN VLC media player allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

Heap Buffer Over-read

vlc:bionic is vulnerable to heap buffer over-read. The xiphSplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a double free issue when parsing MKV files caused by zlibdecompressextra in modules/demux/mkv/util.cpp...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists a heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through an integer underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c...

Buffer Overflow

vlc:bionic is vulnerable to buffer overflow. Due to a flaw, it causes a crash which can possibly be further developed into a remote code execution exploit...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists through a possible use-after-free in the Control function of demux/asf/asf.c...

VLC Media Player < 3.0.11 DoS Vulnerability - Mac OS X

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists as through memory corruption issues...

Denial Of Service (DoS)

VLC is vulnerable to denial of service DoS. The vulnerability exists as an exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in t...

Denial Of Service (DoS)

VLC is vulnerable to denial of service DoS. The vulnerability exists as an exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without...

Arbtirary Code Execution

vlc is vulnerable to arbitrary code execution. A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c allows a remote attacker to cause a denial of service application crash or execute arbitrary code via a malicious H.264 Annex-B video .avi for example file...