CVE-2010-1443

The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...

Null pointer dereference

The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...

CVE-2010-1443

The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...

CVE-2010-1443

CVE-2010-1443 affects VideoLAN VLC media player prior to 1.0.6, specifically the XSPF playlist parser’s parse_track_node function in modules/demux/playlist/xspf.c. The issue allows unauthenticated remote attackers to trigger a denial of service via an empty location element in an XML Shareable Pl...

CVE-2010-1443

The parsetracknode function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty location element in an XML Shareable Playlist Format...

VLC Media Player - XSPF Local File Integer overflow in XSPF playlist parser

No description provided by source. TITLE VLC Media Player XSPF Local File Integer overflow in XSPF playlist parser AFFECTED VERSIONS VLC media player 1.1.9 down to 0.8.5 VENDOR VideoLAN Organisation CLASS Denial of Service DoS RESOURCES http://www.videolan.org/security/sa1104.html PRODUCT...

CVE-2013-3530

SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...

Sql injection

SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...

CVE-2013-3530

CVE-2013-3530 affects the Spiffy XSPF Player WordPress plugin (0.1) components playlist.php through the playlist_id parameter, enabling SQL injection. The issue is confirmed in multiple sources (e.g., WPVulndb, PatchStack) and has associated exploit references; exploitation has been reported. Rem...

CVE-2013-3530

SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the playlistid parameter...

WordPress Plugin Spiffy XSPF Player - playlist_id SQL Injection

WordPress Plugin Spiffy XSPF Player - playlistid SQL Injection source: https://www.securityfocus.com/bid/58976/info Spiffy XSPF Player plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

WordPress Spiffy XSPF Player 0.1 SQL Injection

Exploit Title : Wordpress Spiffy XSPF Player plugin SQL Injection Exploit Author : Ashiyane Digital Security Team Home : www.ashiyane.org Security Risk : High Version : 0.1 Dork : inurl:wp-content/plugins/spiffy/playlist.php?playlistid=...

WordPress Spiffy XSPF Player Plugin - SQL Injection

This WordPress Spiffy XSPF Player plugin's "playlistid" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Spiffy XSPF Player - 'playlist_id' SQL Injection

source: https://www.securityfocus.com/bid/58976/info Spiffy XSPF Player plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

VLC Media Player XSPF Playlist Integer Overflow Vulnerability (Linux)

The host is installed with VLC Media Player and is prone integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerxspfintoverflowvulnlin.nasl 7015 2017-08-28 11:51:24Z teissa $ VLC Media Player XSPF Playlist Integer Overflow Vulnerability Linux Authors: Shashi Kiran N...

VLC Media Player XSPF Playlist Integer Overflow Vulnerability - Linux

VLC Media Player is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VLC Media Player XSPF Playlist Integer Overflow Vulnerability - Windows

VLC Media Player is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-2194

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow...

DEBIAN-CVE-2011-2194

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow...

Integer overflow

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow...