Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
VideolanVlc Media Player0.9.4

27 matches found

CVE
CVE•added 2011/02/07 9:0 p.m.•132 views

CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the ...

9.3CVSS7.3AI score0.73766EPSS
CVE
CVE•added 2012/03/19 4:55 p.m.•131 views

CVE-2012-1775

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.

9.3CVSS7.8AI score0.62287EPSS
CVE
CVE•added 2011/07/07 9:55 p.m.•86 views

CVE-2011-1931

sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write operation outside the bounds of an unspecified array, which allows remote attackers to cause a denial ...

6.8CVSS9.7AI score0.01852EPSS
CVE
CVE•added 2008/11/10 4:15 p.m.•67 views

CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but ...

9.3CVSS7.5AI score0.69531EPSS
CVE
CVE•added 2011/03/28 4:55 p.m.•64 views

CVE-2010-3275

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."

9.3CVSS7.4AI score0.86659EPSS
CVE
CVE•added 2011/06/24 8:55 p.m.•62 views

CVE-2011-2194

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.

9.3CVSS8AI score0.31365EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•58 views

CVE-2010-1444

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive.

7.5CVSS7.8AI score0.019EPSS
CVE
CVE•added 2008/10/22 12:11 a.m.•56 views

CVE-2008-4654

Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.

9.3CVSS7.6AI score0.81203EPSS
CVE
CVE•added 2008/10/22 6:0 p.m.•55 views

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.

9.3CVSS7.2AI score0.81203EPSS
CVE
CVE•added 2008/11/10 10:18 p.m.•55 views

CVE-2008-5036

Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 o...

9.3CVSS7.6AI score0.69531EPSS
CVE
CVE•added 2008/12/03 5:30 p.m.•55 views

CVE-2008-5276

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.

9.3CVSS7.6AI score0.12455EPSS
CVE
CVE•added 2010/08/26 6:36 p.m.•54 views

CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file.

9.3CVSS7.4AI score0.08392EPSS
CVE
CVE•added 2011/07/27 2:55 a.m.•53 views

CVE-2011-2588

Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file.

6.8CVSS8.1AI score0.03211EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•52 views

CVE-2010-1441

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder.

7.5CVSS7.9AI score0.01795EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•50 views

CVE-2010-1442

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.

7.5CVSS7.8AI score0.0182EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•50 views

CVE-2010-2062

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

7.5CVSS7.4AI score0.02991EPSS
CVE
CVE•added 2012/07/12 9:55 p.m.•50 views

CVE-2012-3377

Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file.

6.8CVSS7.9AI score0.03905EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•48 views

CVE-2010-1443

The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Forma...

5CVSS6.4AI score0.00535EPSS
CVE
CVE•added 2012/10/30 7:55 p.m.•48 views

CVE-2012-0023

Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file.

9.3CVSS7.5AI score0.09189EPSS
CVE
CVE•added 2011/03/28 4:55 p.m.•47 views

CVE-2010-3276

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.

9.3CVSS7.4AI score0.06488EPSS
CVE
CVE•added 2011/01/25 7:0 p.m.•46 views

CVE-2011-0021

Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video.

9.3CVSS7.9AI score0.0808EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•46 views

CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level fun...

7.5CVSS7.7AI score0.03687EPSS
CVE
CVE•added 2014/03/21 4:38 a.m.•45 views

CVE-2013-7340

VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.

4.3CVSS6.4AI score0.00443EPSS
CVE
CVE•added 2010/08/20 6:0 p.m.•44 views

CVE-2010-2937

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.

5CVSS6.2AI score0.01215EPSS
CVE
CVE•added 2012/03/19 4:55 p.m.•44 views

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.

9.3CVSS7.9AI score0.04148EPSS
CVE
CVE•added 2014/12/26 8:59 p.m.•43 views

CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session.

7.5CVSS8.2AI score0.01795EPSS
CVE
CVE•added 2011/01/03 8:0 p.m.•42 views

CVE-2010-3907

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer ove...

9.3CVSS8.1AI score0.04354EPSS