Vulnerabilities > Videolan

DATE CVE VULNERABILITY TITLE RISK
2013-10-25 CVE-2013-6283 Improper Input Validation vulnerability in Videolan VLC Media Player
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.
network
low complexity
videolan CWE-20
7.5
2013-07-10 CVE-2013-1868 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Videolan VLC Media Player
Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.
network
videolan CWE-119
critical
9.3
2013-07-10 CVE-2012-5855 Numeric Errors vulnerability in Videolan VLC Media Player
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC.
network
videolan CWE-189
4.3
2012-10-26 CVE-2012-5470 Buffer Errors vulnerability in Videolan VLC Media Player 2.0.3
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file.
network
videolan CWE-119
4.3
2012-04-19 CVE-2012-2396 Unspecified vulnerability in Videolan VLC Media Player 2.0.1
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.
network
videolan
4.3
2012-03-19 CVE-2012-1776 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Videolan VLC Media Player
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
network
videolan CWE-119
critical
9.3
2012-01-20 CVE-2012-0904 Resource Management Errors vulnerability in Videolan VLC Media Player 1.1.11
VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.
network
videolan CWE-399
4.3
2011-06-24 CVE-2011-2194 Numeric Errors vulnerability in Videolan VLC Media Player
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
network
videolan CWE-189
critical
9.3
2011-05-03 CVE-2011-1087 Buffer Errors vulnerability in Videolan VLC Media Player 1.0.5
Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.
network
high complexity
videolan CWE-119
7.6
2011-03-28 CVE-2010-3276 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Videolan VLC Media Player
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.
network
videolan CWE-119
critical
9.3