PT-2020-6647 · Videolan +3 · Vlc Media Player +3

Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 3.0.11 Description: A buffer overflow vulnerability in the Parse indx component of VideoLAN VLC Media Player allows attackers to cause an out-of-bounds read via a crafted .avi file. This vulnerability is...

PT-2020-6646 · Videolan +3 · Vlc Media Player +3

Name of the Vulnerable Software and Affected Versions: VLC Media Player version 3.0.11 Description: A buffer overflow vulnerability in the AVI ExtractSubtitle component allows attackers to cause an out-of-bounds read via a crafted .avi file. This can be exploited by a remote attacker to gain acce...

VLC < 2.0.8 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.0.8. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7 and possibly other versions...

VLC < 2.0.4 DoS

A denial of service DoS vulnerability exists in libpngplugin in VLC media player before 2.0.4. Allows remote attackers to cause a denial of service crash via a crafted PNG file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid138899; scriptversion"1.5";...

VLC < 2.2.4 DoS

The version of VLC media player installed on the remote host with version prior to 2.2.4, is affected by a denial of service vulnerability. A buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN allows remote attackers to cause a denial of service crash or possibl...

VLC < 2.2.0 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.2.0. It is, therefore, affected by multiple vulnerabilities: - An exploitable Cross-site scripting XSS vulnerability exists in the httpdHtmlError function in network/httpd.c in the web interface in VideoLAN VLC Med...

VLC < 1.1.12 DoS

A denial of service DoS vulnerability exists in VLC media player before 1.1.12. Allows remote attackers to cause a denial of service crash via a long string in an amr file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid138341; scriptversion"1.5";...

MGASA-2020-0272 Updated vlc packages fix security vulnerability

Updated vlc packages fixes security vulnerability: A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted...

Updated vlc packages fix security vulnerability

Updated vlc packages fixes security vulnerability: A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted...

The vulnerability of the Videolabs libmicrodns 0.1.0 message parser allows a malicious actor to cause a service failure by exploiting a resource consumption issue in the VideoLAN VLC media player.

The vulnerability of the Videolabs libmicrodns 0.1.0 message parser, when used with the VideoLAN VLC media player, is related to an uncontrolled resource consumption during the analysis of mDNS messages. Exploiting this vulnerability could allow a malicious actor to cause service failures remotel...

VLC < 2.1.6 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.1.6. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in the picturepoolDelete function in misc/picturepool.c in VideoLAN VLC media player 2.1.5. Allow...

FreeBSD : vlc heap-based buffer overflow (77896891-b08a-11ea-937b-b42e99a1b9c3)

Thomas Guillem reports : A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted H.264 Annex-B video .avi...

Debian DSA-4704-1 : vlc - security update

A vulnerability was discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed video file is opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian: Security Advisory (DSA-4704-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerability fixed in VLC

VideoLan has fixed a vulnerability in VLC Media Player. The vulnerability allows an unauthenticated remote malicious person able to cause a denial-of-service, and potentially execute arbitrary code with privileges of the affected user. To do so, the malicious party must entice the victim to open ...

[SECURITY] [DSA 4704-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4704-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 16, 2020 https://www.debian.org/security/faq -...

DSA-4704-1 vlc - security update

Bulletin has no description...

VLC Media Player < 1.0.2 Stack-based Buffer Overflow

A stack-based buffer overflow condition exists in VLC media player before 1.0.2 due 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file,related to the AVIChunkDumpDebuglevel function in modules/demux/avi/libavi.c; or 3 a crafted MP4...

VLC Media Player < 1.0.6 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 1.0.6. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in VideoLAN VLC media player before 1.0.6 due to heap-based buffer overflow. An unauthenticated, remote...

VLC < 2.2.2 DoS

A denial of service DoS vulnerability exists in VLC media player before 2.2.2. Allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing of arbitrary pointers. Note that Nessus has not tested for this issue bu...