CVE Vulnerabilities for VLC
| CVE | Published | Severity | Details | Exploitability | Impact | Vector |
|---|---|---|---|---|---|---|
| CVE‑2023‑47360 | 2023‑11‑07 16:15:29 | HIGH (8) | Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. | 4 | 4 | NETWORK |
| CVE‑2023‑47359 | 2023‑11‑07 16:15:29 | CRITICAL (10) | Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption. | 4 | 6 | NETWORK |
| CVE‑2023‑46814 | 2023‑11‑22 05:15:08 | HIGH (8) | A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM. | 2 | 6 | LOCAL |
| CVE‑2022‑41325 | 2022‑12‑06 16:15:11 | HIGH (8) | An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions. | 2 | 6 | LOCAL |
| CVE‑2021‑25804 | 2021‑07‑26 17:15:08 | HIGH (8) | A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application. | 4 | 4 | NETWORK |
| CVE‑2021‑25803 | 2021‑07‑26 17:15:08 | HIGH (7) | A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. | 2 | 5 | LOCAL |
| CVE‑2021‑25802 | 2021‑07‑26 17:15:08 | HIGH (7) | A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. | 2 | 5 | LOCAL |
| CVE‑2021‑25801 | 2021‑07‑26 17:15:08 | HIGH (7) | A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. | 2 | 5 | LOCAL |
| CVE‑2020‑26664 | 2021‑01‑08 18:15:13 | HIGH (8) | A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file. | 2 | 6 | LOCAL |
| CVE‑2020‑13428 | 2020‑06‑08 19:15:11 | HIGH (8) | A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file. | 2 | 6 | LOCAL |
| CVE‑2019‑5460 | 2019‑07‑30 21:15:12 | MEDIUM (6) | Double Free in VLC versions <= 3.0.6 leads to a crash. | 2 | 4 | LOCAL |
| CVE‑2019‑5459 | 2019‑07‑30 21:15:12 | HIGH (7) | An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read. | 2 | 5 | LOCAL |
| CVE‑2019‑5439 | 2019‑06‑13 16:29:02 | MEDIUM (4) | A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit. | 0 | 0 | NETWORK |
| CVE‑2019‑19721 | 2020‑05‑15 18:15:13 | HIGH (8) | An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product. | 2 | 6 | LOCAL |
| CVE‑2019‑18278 | 2019‑10‑23 14:15:11 | HIGH (8) | When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this issue. | 2 | 6 | LOCAL |
| CVE‑2019‑14970 | 2019‑08‑29 19:15:14 | MEDIUM (7) | A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file. | 0 | 0 | NETWORK |
| CVE‑2019‑14778 | 2019‑08‑29 19:15:14 | MEDIUM (7) | The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 0 | 0 | NETWORK |
| CVE‑2019‑14777 | 2019‑08‑29 19:15:13 | MEDIUM (7) | The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 0 | 0 | NETWORK |
| CVE‑2019‑14776 | 2019‑08‑29 19:15:13 | MEDIUM (7) | A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file. | 0 | 0 | NETWORK |
| CVE‑2019‑14535 | 2019‑08‑29 18:15:12 | MEDIUM (7) | A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file. | 0 | 0 | NETWORK |
| CVE‑2019‑14534 | 2019‑08‑29 19:15:13 | MEDIUM (4) | In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack. | 0 | 0 | NETWORK |
| CVE‑2019‑14533 | 2019‑08‑29 19:15:13 | MEDIUM (7) | The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 0 | 0 | NETWORK |
| CVE‑2019‑14498 | 2019‑08‑29 18:15:12 | MEDIUM (7) | A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file. | 0 | 0 | NETWORK |
| CVE‑2019‑14438 | 2019‑08‑29 18:15:12 | MEDIUM (7) | A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file. | 0 | 0 | NETWORK |
| CVE‑2019‑14437 | 2019‑08‑29 18:15:12 | MEDIUM (7) | The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file. | 0 | 0 | NETWORK |
| CVE‑2019‑13962 | 2019‑07‑18 20:15:12 | CRITICAL (10) | lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height. | 4 | 6 | NETWORK |
| CVE‑2019‑13615 | 2019‑07‑16 17:15:13 | MEDIUM (4) | libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement. | 0 | 0 | NETWORK |
| CVE‑2019‑13602 | 2019‑07‑14 21:15:11 | HIGH (8) | An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file. | 2 | 6 | LOCAL |
| CVE‑2019‑12874 | 2019‑06‑18 18:15:11 | HIGH (8) | An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free. | 0 | 0 | NETWORK |
| CVE‑2018‑19857 | 2018‑12‑05 11:29:06 | MEDIUM (6) | The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int even if that value is negative. This could result in a denial of service and/or a potential infoleak. | 0 | 0 | NETWORK |
| CVE‑2018‑11529 | 2018‑07‑11 16:29:01 | MEDIUM (7) | VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions. | 0 | 0 | NETWORK |
| CVE‑2018‑11516 | 2018‑05‑28 16:29:00 | HIGH (9) | The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file. | 3 | 6 | NETWORK |
| CVE‑2017‑9301 | 2017‑05‑29 19:29:00 | MEDIUM (7) | plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file. | 0 | 0 | NETWORK |
| CVE‑2017‑9300 | 2017‑05‑29 19:29:00 | MEDIUM (7) | plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file. | 0 | 0 | NETWORK |
| CVE‑2017‑8313 | 2017‑05‑23 21:29:00 | MEDIUM (4) | Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file. | 0 | 0 | NETWORK |
| CVE‑2017‑8312 | 2017‑05‑23 21:29:00 | MEDIUM (4) | Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file. | 0 | 0 | NETWORK |
| CVE‑2017‑8311 | 2017‑05‑23 21:29:00 | MEDIUM (7) | Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file. | 0 | 0 | NETWORK |
| CVE‑2017‑8310 | 2017‑05‑23 21:29:00 | MEDIUM (4) | Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file. | 0 | 0 | NETWORK |
| CVE‑2017‑17670 | 2017‑12‑15 09:29:00 | MEDIUM (7) | In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation. | 0 | 0 | NETWORK |
| CVE‑2017‑10699 | 2017‑06‑30 13:29:00 | HIGH (8) | avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a denial of service (application crash) or possibly code execution. | 0 | 0 | NETWORK |
| CVE‑2016‑5108 | 2016‑06‑08 15:00:04 | HIGH (8) | Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file. | 0 | 0 | NETWORK |
| CVE‑2016‑3941 | 2016‑04‑18 15:59:01 | MEDIUM (4) | Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF." | 0 | 0 | NETWORK |
| CVE‑2015‑5949 | 2015‑08‑25 17:59:05 | MEDIUM (7) | VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing of arbitrary pointers. | 0 | 0 | NETWORK |
| CVE‑2014‑9743 | 2015‑08‑17 15:59:00 | MEDIUM (4) | Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info. | 0 | 0 | NETWORK |
| CVE‑2014‑9630 | 2020‑01‑24 22:15:13 | HIGH (8) | The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted length value. | 2 | 6 | LOCAL |
| CVE‑2014‑9629 | 2020‑01‑24 22:15:13 | HIGH (8) | Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value. | 2 | 6 | LOCAL |
| CVE‑2014‑9628 | 2020‑01‑24 22:15:13 | HIGH (8) | The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7. | 2 | 6 | LOCAL |
| CVE‑2014‑9627 | 2020‑01‑24 22:15:12 | HIGH (8) | The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size. | 2 | 6 | LOCAL |
| CVE‑2014‑9626 | 2020‑01‑24 22:15:12 | HIGH (8) | Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7. | 2 | 6 | LOCAL |
| CVE‑2014‑9625 | 2020‑01‑24 22:15:12 | HIGH (8) | The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update status file, aka an "integer truncation" vulnerability. | 2 | 6 | LOCAL |
| CVE‑2014‑9598 | 2015‑01‑21 15:17:10 | MEDIUM (7) | The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (write access violation) via a crafted M2V file. | 0 | 0 | NETWORK |
| CVE‑2014‑9597 | 2015‑01‑21 15:17:09 | MEDIUM (7) | The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (DEP violation and application crash) via a crafted FLV file. | 0 | 0 | NETWORK |
| CVE‑2014‑3441 | 2014‑05‑14 19:55:13 | MEDIUM (4) | codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file. | 0 | 0 | NETWORK |
| CVE‑2014‑1684 | 2014‑03‑03 16:55:04 | MEDIUM (4) | The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file. | 0 | 0 | NETWORK |
| CVE‑2013‑7340 | 2014‑03‑21 04:38:59 | MEDIUM (4) | VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file. | 0 | 0 | NETWORK |
| CVE‑2013‑6934 | 2014‑01‑23 21:55:05 | HIGH (8) | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933. | 0 | 0 | NETWORK |
| CVE‑2013‑6283 | 2013‑10‑25 23:55:05 | HIGH (8) | VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file. | 0 | 0 | NETWORK |
| CVE‑2013‑4388 | 2013‑10‑11 22:55:40 | MEDIUM (7) | Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. | 0 | 0 | NETWORK |
| CVE‑2013‑3565 | 2020‑01‑31 22:15:10 | MEDIUM (6) | Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) command parameter to requests/vlm_cmd.xml, (2) dir parameter to requests/browse.xml, or (3) URI in a request, which is returned in an error message through share/lua/intf/http.lua. | 3 | 3 | NETWORK |
| CVE‑2013‑3564 | 2020‑02‑06 22:15:10 | MEDIUM (5) | The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating. | 4 | 1 | NETWORK |
| CVE‑2013‑3245 | 2013‑07‑10 19:55:05 | MEDIUM (6) | plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer overflow, or an uncaught exception. NOTE: the vendor disputes the severity and claimed vulnerability type of this issue, stating "This PoC crashes VLC, indeed, but does nothing more... this is not an integer overflow error, but an uncaught exception and I doubt that it is exploitable. This uncaught exception makes VLC abort, not execute random code, on my Linux 64bits machine." A PoC posted by the original researcher shows signs of an attacker-controlled out-of-bounds read, but the affected instruction does not involve a register that directly influences control flow | 3 | 3 | NETWORK |
| CVE‑2013‑1954 | 2013‑07‑10 19:55:05 | MEDIUM (7) | The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read. | 0 | 0 | NETWORK |
| CVE‑2013‑1868 | 2013‑07‑10 19:55:05 | HIGH (9) | Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser. | 0 | 0 | NETWORK |
| CVE‑2012‑5855 | 2013‑07‑10 19:55:01 | MEDIUM (4) | The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction. | 0 | 0 | NETWORK |
| CVE‑2012‑5470 | 2012‑10‑26 10:39:17 | MEDIUM (4) | libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file. | 0 | 0 | NETWORK |
| CVE‑2012‑3377 | 2012‑07‑12 21:55:08 | MEDIUM (7) | Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file. | 0 | 0 | NETWORK |
| CVE‑2012‑2396 | 2012‑04‑19 21:55:01 | MEDIUM (4) | VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file. | 0 | 0 | NETWORK |
| CVE‑2012‑1776 | 2012‑03‑19 16:55:01 | HIGH (9) | Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream. | 0 | 0 | NETWORK |
| CVE‑2012‑1775 | 2012‑03‑19 16:55:01 | HIGH (9) | Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream. | 0 | 0 | NETWORK |
| CVE‑2012‑0904 | 2012‑01‑20 17:55:03 | MEDIUM (4) | VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file. | 0 | 0 | NETWORK |
| CVE‑2012‑0023 | 2012‑10‑30 19:55:04 | HIGH (9) | Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file. | 0 | 0 | NETWORK |
| CVE‑2011‑3623 | 2014‑12‑26 20:59:08 | HIGH (8) | Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level function in modules/demux/avi/libavi.c; or (3) a crafted MP4 file, related to the __MP4_BoxDumpStructure function in modules/demux/mp4/libmp4.c. | 0 | 0 | NETWORK |
| CVE‑2011‑2588 | 2011‑07‑27 02:55:02 | MEDIUM (7) | Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file. | 0 | 0 | NETWORK |
| CVE‑2011‑2587 | 2011‑07‑27 02:55:02 | MEDIUM (7) | Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file. | 0 | 0 | NETWORK |
| CVE‑2011‑2194 | 2011‑06‑24 20:55:04 | HIGH (9) | Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. | 0 | 0 | NETWORK |
| CVE‑2011‑1931 | 2011‑07‑07 21:55:02 | MEDIUM (7) | sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write operation outside the bounds of an unspecified array, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed AMV file. | 0 | 0 | NETWORK |
| CVE‑2011‑1684 | 2011‑05‑03 20:55:12 | MEDIUM (7) | Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file. | 0 | 0 | NETWORK |
| CVE‑2011‑1087 | 2011‑05‑03 19:55:04 | HIGH (8) | Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation. | 0 | 0 | NETWORK |
| CVE‑2011‑0531 | 2011‑02‑07 21:00:17 | HIGH (9) | demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro. | 0 | 0 | NETWORK |
| CVE‑2011‑0522 | 2011‑02‑07 21:00:15 | MEDIUM (7) | The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "<" without a closing ">" in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv. | 0 | 0 | NETWORK |
| CVE‑2011‑0021 | 2011‑01‑25 19:00:04 | HIGH (9) | Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video. | 0 | 0 | NETWORK |
| CVE‑2010‑3907 | 2011‑01‑03 20:00:43 | HIGH (9) | Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow. | 0 | 0 | NETWORK |
| CVE‑2010‑3276 | 2011‑03‑28 16:55:03 | HIGH (9) | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file. | 0 | 0 | NETWORK |
| CVE‑2010‑3275 | 2011‑03‑28 16:55:03 | HIGH (9) | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability." | 0 | 0 | NETWORK |
| CVE‑2010‑3124 | 2010‑08‑26 18:36:36 | HIGH (9) | Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file. | 0 | 0 | NETWORK |
| CVE‑2010‑2937 | 2010‑08‑20 18:00:02 | MEDIUM (5) | The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file. | 0 | 0 | NETWORK |
| CVE‑2010‑2062 | 2014‑12‑26 20:59:07 | HIGH (8) | Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header. | 0 | 0 | NETWORK |
| CVE‑2010‑1445 | 2014‑12‑26 20:59:06 | HIGH (8) | Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session. | 0 | 0 | NETWORK |
| CVE‑2010‑1444 | 2014‑12‑26 20:59:06 | HIGH (8) | The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive. | 0 | 0 | NETWORK |
| CVE‑2010‑1443 | 2014‑12‑26 20:59:04 | MEDIUM (5) | The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document. | 0 | 0 | NETWORK |
| CVE‑2010‑1442 | 2014‑12‑26 20:59:03 | HIGH (8) | VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer. | 0 | 0 | NETWORK |
| CVE‑2010‑1441 | 2014‑12‑26 20:59:00 | HIGH (8) | Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder. | 0 | 0 | NETWORK |
| CVE‑2010‑0364 | 2010‑01‑21 20:30:00 | HIGH (9) | Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field. | 0 | 0 | NETWORK |
View OS-specific patching for:
Windows Mac Linux
Logos, products, trade names, and company names are all the property of their respective trademark holders.
The above listing includes products that Lavawall® monitors through public information and/or proprietary statistical analysis.
Although we do have a partner relationship with some of the listed products and companies, they do not necessarily endorse Lavawall® or have integrations with our systems.