Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
VideolanVlc Media Player0.8.6b

15 matches found

CVE
CVE•added 2012/03/19 4:55 p.m.•131 views

CVE-2012-1775

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.

9.3CVSS7.8AI score0.62287EPSS
CVE
CVE•added 2007/06/21 6:30 p.m.•77 views

CVE-2007-3316

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio ...

9.3CVSS7.6AI score0.46189EPSS
CVE
CVE•added 2008/11/10 4:15 p.m.•67 views

CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but ...

9.3CVSS7.5AI score0.69531EPSS
CVE
CVE•added 2011/06/24 8:55 p.m.•62 views

CVE-2011-2194

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.

9.3CVSS8AI score0.31365EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•58 views

CVE-2010-1444

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive.

7.5CVSS7.8AI score0.019EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•52 views

CVE-2010-1441

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder.

7.5CVSS7.9AI score0.01795EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•50 views

CVE-2010-1442

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.

7.5CVSS7.8AI score0.0182EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•50 views

CVE-2010-2062

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

7.5CVSS7.4AI score0.02991EPSS
CVE
CVE•added 2012/07/12 9:55 p.m.•50 views

CVE-2012-3377

Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file.

6.8CVSS7.9AI score0.03905EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•48 views

CVE-2010-1443

The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Forma...

5CVSS6.4AI score0.00535EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•46 views

CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level fun...

7.5CVSS7.7AI score0.03687EPSS
CVE
CVE•added 2014/03/21 4:38 a.m.•45 views

CVE-2013-7340

VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.

4.3CVSS6.4AI score0.00443EPSS
CVE
CVE•added 2012/03/19 4:55 p.m.•44 views

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.

9.3CVSS7.9AI score0.04148EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•43 views

CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session.

7.5CVSS8.2AI score0.01795EPSS
CVE
CVE•added 2007/12/06 2:46 a.m.•38 views

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerab...

6.8CVSS7.6AI score0.19601EPSS