| 0 |
|
| 1 |
| url |
VCID-22fc-m3gp-u7g8 |
| vulnerability_id |
VCID-22fc-m3gp-u7g8 |
| summary |
demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-0531
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-22fc-m3gp-u7g8 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
| url |
VCID-2wm4-zq6n-u7cw |
| vulnerability_id |
VCID-2wm4-zq6n-u7cw |
| summary |
Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-2587
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2wm4-zq6n-u7cw |
|
| 7 |
| url |
VCID-2zt8-x7cs-63aw |
| vulnerability_id |
VCID-2zt8-x7cs-63aw |
| summary |
The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, which triggers a NULL pointer dereference. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-6684
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2zt8-x7cs-63aw |
|
| 8 |
| url |
VCID-31tj-6sdh-kyc6 |
| vulnerability_id |
VCID-31tj-6sdh-kyc6 |
| summary |
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2005-4048
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-31tj-6sdh-kyc6 |
|
| 9 |
|
| 10 |
|
| 11 |
| url |
VCID-3fuz-525g-7qhn |
| vulnerability_id |
VCID-3fuz-525g-7qhn |
| summary |
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-3275
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3fuz-525g-7qhn |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
| url |
VCID-5q88-362x-8fbe |
| vulnerability_id |
VCID-5q88-362x-8fbe |
| summary |
Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-1445
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5q88-362x-8fbe |
|
| 17 |
| url |
VCID-68a3-djza-fkc6 |
| vulnerability_id |
VCID-68a3-djza-fkc6 |
| summary |
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-0984
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-68a3-djza-fkc6 |
|
| 18 |
|
| 19 |
| url |
VCID-6fe9-zqgp-rkey |
| vulnerability_id |
VCID-6fe9-zqgp-rkey |
| summary |
Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-1684
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6fe9-zqgp-rkey |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
| url |
VCID-78tg-e6np-x3ca |
| vulnerability_id |
VCID-78tg-e6np-x3ca |
| summary |
The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-2937
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-78tg-e6np-x3ca |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
| url |
VCID-99jx-jjxn-93ad |
| vulnerability_id |
VCID-99jx-jjxn-93ad |
| summary |
Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a WAV file with a large sample rate. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-3467
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-99jx-jjxn-93ad |
|
| 30 |
|
| 31 |
|
| 32 |
|
| 33 |
|
| 34 |
| url |
VCID-a7x2-a4kt-3yam |
| vulnerability_id |
VCID-a7x2-a4kt-3yam |
| summary |
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-6283
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a7x2-a4kt-3yam |
|
| 35 |
| url |
VCID-a9mf-5dre-wfce |
| vulnerability_id |
VCID-a9mf-5dre-wfce |
| summary |
Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-3377
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a9mf-5dre-wfce |
|
| 36 |
|
| 37 |
|
| 38 |
| url |
VCID-b67n-vqzx-j3ev |
| vulnerability_id |
VCID-b67n-vqzx-j3ev |
| summary |
Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-0023
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b67n-vqzx-j3ev |
|
| 39 |
|
| 40 |
|
| 41 |
| url |
VCID-cvbd-ydn7-cugm |
| vulnerability_id |
VCID-cvbd-ydn7-cugm |
| summary |
Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-6681
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cvbd-ydn7-cugm |
|
| 42 |
| url |
VCID-cxmz-xy2h-hfaj |
| vulnerability_id |
VCID-cxmz-xy2h-hfaj |
| summary |
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-3564
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cxmz-xy2h-hfaj |
|
| 43 |
| url |
VCID-czjd-h9eu-x7d6 |
| vulnerability_id |
VCID-czjd-h9eu-x7d6 |
| summary |
Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-1768
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-czjd-h9eu-x7d6 |
|
| 44 |
|
| 45 |
| url |
VCID-duzt-8hry-afcq |
| vulnerability_id |
VCID-duzt-8hry-afcq |
| summary |
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-1776
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-duzt-8hry-afcq |
|
| 46 |
| url |
VCID-dv6p-47uf-8ucb |
| vulnerability_id |
VCID-dv6p-47uf-8ucb |
| summary |
Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2004-1476
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dv6p-47uf-8ucb |
|
| 47 |
|
| 48 |
|
| 49 |
|
| 50 |
| url |
VCID-ezme-bbsg-4khs |
| vulnerability_id |
VCID-ezme-bbsg-4khs |
| summary |
plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2017-9301
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ezme-bbsg-4khs |
|
| 51 |
|
| 52 |
| url |
VCID-fq5r-txzc-gfdp |
| vulnerability_id |
VCID-fq5r-txzc-gfdp |
| summary |
Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-2588
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fq5r-txzc-gfdp |
|
| 53 |
| url |
VCID-fret-qvh1-13gg |
| vulnerability_id |
VCID-fret-qvh1-13gg |
| summary |
xine-lib: various flaws (CVE-2008-5234 CVE-2008-5235 CVE-2008-5236 CVE-2008-5237 CVE-2008-5239 CVE-2008-5240 CVE-2008-5241 CVE-2008-5242 CVE-2008-5243 CVE-2008-5244 CVE-2008-5247) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-5235
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fret-qvh1-13gg |
|
| 54 |
|
| 55 |
|
| 56 |
| url |
VCID-ge6q-4wte-nqg9 |
| vulnerability_id |
VCID-ge6q-4wte-nqg9 |
| summary |
VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-1442
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ge6q-4wte-nqg9 |
|
| 57 |
| url |
VCID-gpn8-y9dh-q3dx |
| vulnerability_id |
VCID-gpn8-y9dh-q3dx |
| summary |
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-0296
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gpn8-y9dh-q3dx |
|
| 58 |
|
| 59 |
| url |
VCID-h6u5-n817-h3d6 |
| vulnerability_id |
VCID-h6u5-n817-h3d6 |
| summary |
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-1489
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h6u5-n817-h3d6 |
|
| 60 |
|
| 61 |
|
| 62 |
| url |
VCID-harf-7fgm-e3bg |
| vulnerability_id |
VCID-harf-7fgm-e3bg |
| summary |
A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2023-46814
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-harf-7fgm-e3bg |
|
| 63 |
| url |
VCID-htn6-yzy9-5bhh |
| vulnerability_id |
VCID-htn6-yzy9-5bhh |
| summary |
Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-0021
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-htn6-yzy9-5bhh |
|
| 64 |
|
| 65 |
|
| 66 |
| url |
VCID-hy5g-janm-k7db |
| vulnerability_id |
VCID-hy5g-janm-k7db |
| summary |
Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-4558
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hy5g-janm-k7db |
|
| 67 |
| url |
VCID-j1ew-2wsn-ykfk |
| vulnerability_id |
VCID-j1ew-2wsn-ykfk |
| summary |
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2014-1684
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j1ew-2wsn-ykfk |
|
| 68 |
|
| 69 |
|
| 70 |
| url |
VCID-jk2v-69pf-7yea |
| vulnerability_id |
VCID-jk2v-69pf-7yea |
| summary |
Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-3732
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jk2v-69pf-7yea |
|
| 71 |
| url |
VCID-jkex-a5gg-qbf4 |
| vulnerability_id |
VCID-jkex-a5gg-qbf4 |
| summary |
plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer overflow, or an uncaught exception. NOTE: the vendor disputes the severity and claimed vulnerability type of this issue, stating "This PoC crashes VLC, indeed, but does nothing more... this is not an integer overflow error, but an uncaught exception and I doubt that it is exploitable. This uncaught exception makes VLC abort, not execute random code, on my Linux 64bits machine." A PoC posted by the original researcher shows signs of an attacker-controlled out-of-bounds read, but the affected instruction does not involve a register that directly influences control flow |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
http://secunia.com/blog/372/ |
| reference_id |
372 |
| reference_type |
|
| scores |
| 0 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L |
|
| 1 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T20:20:26Z/ |
|
|
| url |
http://secunia.com/blog/372/ |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2013-3245
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jkex-a5gg-qbf4 |
|
| 72 |
|
| 73 |
|
| 74 |
|
| 75 |
| url |
VCID-kmyx-swec-bbg9 |
| vulnerability_id |
VCID-kmyx-swec-bbg9 |
| summary |
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-2062
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kmyx-swec-bbg9 |
|
| 76 |
|
| 77 |
|
| 78 |
| url |
VCID-mfeq-7yau-27aw |
| vulnerability_id |
VCID-mfeq-7yau-27aw |
| summary |
Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-2430
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mfeq-7yau-27aw |
|
| 79 |
| url |
VCID-mh6m-sbyf-dkag |
| vulnerability_id |
VCID-mh6m-sbyf-dkag |
| summary |
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) command parameter to requests/vlm_cmd.xml, (2) dir parameter to requests/browse.xml, or (3) URI in a request, which is returned in an error message through share/lua/intf/http.lua. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2013-3565
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mh6m-sbyf-dkag |
|
| 80 |
| url |
VCID-mkyh-xdxg-dyg4 |
| vulnerability_id |
VCID-mkyh-xdxg-dyg4 |
| summary |
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-0295
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mkyh-xdxg-dyg4 |
|
| 81 |
|
| 82 |
|
| 83 |
|
| 84 |
|
| 85 |
| url |
VCID-n6au-6hme-2bgr |
| vulnerability_id |
VCID-n6au-6hme-2bgr |
| summary |
Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-1087
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-n6au-6hme-2bgr |
|
| 86 |
| url |
VCID-ncpt-w2jn-xqer |
| vulnerability_id |
VCID-ncpt-w2jn-xqer |
| summary |
Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level function in modules/demux/avi/libavi.c; or (3) a crafted MP4 file, related to the __MP4_BoxDumpStructure function in modules/demux/mp4/libmp4.c. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3623
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ncpt-w2jn-xqer |
|
| 87 |
| url |
VCID-nhfw-24cw-cqge |
| vulnerability_id |
VCID-nhfw-24cw-cqge |
| summary |
The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-6683
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nhfw-24cw-cqge |
|
| 88 |
| url |
VCID-nmu8-cndc-nka7 |
| vulnerability_id |
VCID-nmu8-cndc-nka7 |
| summary |
Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-2147
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nmu8-cndc-nka7 |
|
| 89 |
|
| 90 |
|
| 91 |
| url |
VCID-p86b-zj2h-6fb9 |
| vulnerability_id |
VCID-p86b-zj2h-6fb9 |
| summary |
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-5032
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p86b-zj2h-6fb9 |
|
| 92 |
| url |
VCID-p9qv-v6j4-pufq |
| vulnerability_id |
VCID-p9qv-v6j4-pufq |
| summary |
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-2194
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p9qv-v6j4-pufq |
|
| 93 |
|
| 94 |
|
| 95 |
| url |
VCID-pmsk-muwc-uffz |
| vulnerability_id |
VCID-pmsk-muwc-uffz |
| summary |
Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2014-9743
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pmsk-muwc-uffz |
|
| 96 |
| url |
VCID-q36j-35sw-nkeh |
| vulnerability_id |
VCID-q36j-35sw-nkeh |
| summary |
Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-3907
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q36j-35sw-nkeh |
|
| 97 |
|
| 98 |
| url |
VCID-qmva-vqp9-wkfq |
| vulnerability_id |
VCID-qmva-vqp9-wkfq |
| summary |
Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-1441
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qmva-vqp9-wkfq |
|
| 99 |
|
| 100 |
| url |
VCID-r5k9-wp2y-dkdx |
| vulnerability_id |
VCID-r5k9-wp2y-dkdx |
| summary |
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-3468
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-r5k9-wp2y-dkdx |
|
| 101 |
| url |
VCID-r6ha-cnd9-8qhv |
| vulnerability_id |
VCID-r6ha-cnd9-8qhv |
| summary |
codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2014-3441
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-r6ha-cnd9-8qhv |
|
| 102 |
| url |
VCID-ra3c-5cmg-3kbc |
| vulnerability_id |
VCID-ra3c-5cmg-3kbc |
| summary |
Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX (libvcdx_plugin) plugin, in VideoLAN VLC 0.7.0 through 0.8.6 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an invalid URI, as demonstrated by a udp://-- URI in an M3U file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-0017
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ra3c-5cmg-3kbc |
|
| 103 |
|
| 104 |
| url |
VCID-shrz-362s-4bcd |
| vulnerability_id |
VCID-shrz-362s-4bcd |
| summary |
Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2016-3941
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-shrz-362s-4bcd |
|
| 105 |
|
| 106 |
|
| 107 |
|
| 108 |
| url |
VCID-sp9r-p23e-zqhj |
| vulnerability_id |
VCID-sp9r-p23e-zqhj |
| summary |
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-1443
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sp9r-p23e-zqhj |
|
| 109 |
|
| 110 |
| url |
VCID-t4v1-1k8v-uybx |
| vulnerability_id |
VCID-t4v1-1k8v-uybx |
| summary |
The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-1444
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t4v1-1k8v-uybx |
|
| 111 |
|
| 112 |
|
| 113 |
| url |
VCID-tt91-ztvn-kbf6 |
| vulnerability_id |
VCID-tt91-ztvn-kbf6 |
| summary |
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-3316
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tt91-ztvn-kbf6 |
|
| 114 |
| url |
VCID-u3h3-qmbh-13br |
| vulnerability_id |
VCID-u3h3-qmbh-13br |
| summary |
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-4654
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u3h3-qmbh-13br |
|
| 115 |
| url |
VCID-u79p-e66u-43at |
| vulnerability_id |
VCID-u79p-e66u-43at |
| summary |
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-5276
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u79p-e66u-43at |
|
| 116 |
|
| 117 |
| url |
VCID-ufqp-rwut-g3dc |
| vulnerability_id |
VCID-ufqp-rwut-g3dc |
| summary |
The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "<" without a closing ">" in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-0522
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ufqp-rwut-g3dc |
|
| 118 |
| url |
VCID-ug67-e5a7-bugv |
| vulnerability_id |
VCID-ug67-e5a7-bugv |
| summary |
Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-3794
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ug67-e5a7-bugv |
|
| 119 |
|
| 120 |
| url |
VCID-un24-zjr5-t7d7 |
| vulnerability_id |
VCID-un24-zjr5-t7d7 |
| summary |
The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2018-11516
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-un24-zjr5-t7d7 |
|
| 121 |
|
| 122 |
| url |
VCID-vmmu-2y2z-yygw |
| vulnerability_id |
VCID-vmmu-2y2z-yygw |
| summary |
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-5036
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vmmu-2y2z-yygw |
|
| 123 |
|
| 124 |
|
| 125 |
| url |
VCID-wfhz-6d7j-7ff5 |
| vulnerability_id |
VCID-wfhz-6d7j-7ff5 |
| summary |
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-0364
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wfhz-6d7j-7ff5 |
|
| 126 |
| url |
VCID-wukc-mwey-5uar |
| vulnerability_id |
VCID-wukc-mwey-5uar |
| summary |
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-6262
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wukc-mwey-5uar |
|
| 127 |
| url |
VCID-x2rm-v3qg-nbcb |
| vulnerability_id |
VCID-x2rm-v3qg-nbcb |
| summary |
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2009-2484
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-x2rm-v3qg-nbcb |
|
| 128 |
|
| 129 |
|
| 130 |
|
| 131 |
| url |
VCID-xqjz-9pjm-uqcq |
| vulnerability_id |
VCID-xqjz-9pjm-uqcq |
| summary |
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2004-1455
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xqjz-9pjm-uqcq |
|
| 132 |
|
| 133 |
| url |
VCID-ygt3-byr3-7qd7 |
| vulnerability_id |
VCID-ygt3-byr3-7qd7 |
| summary |
Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-1881
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ygt3-byr3-7qd7 |
|
| 134 |
| url |
VCID-yqh1-uu6s-wbgw |
| vulnerability_id |
VCID-yqh1-uu6s-wbgw |
| summary |
Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2007-6682
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yqh1-uu6s-wbgw |
|
| 135 |
| url |
VCID-ytbx-nzy9-xkgv |
| vulnerability_id |
VCID-ytbx-nzy9-xkgv |
| summary |
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2008-4686
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ytbx-nzy9-xkgv |
|
| 136 |
|
| 137 |
|
| 138 |
|
| 139 |
|
| 140 |
|