Vulnerabilities > Videolan > VLC Media Player > 1.1.10.1

DATE CVE VULNERABILITY TITLE RISK
2013-10-25 CVE-2013-6283 Improper Input Validation vulnerability in Videolan VLC Media Player
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.
network
low complexity
videolan CWE-20
7.5
2013-07-10 CVE-2013-1868 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Videolan VLC Media Player
Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.
network
videolan CWE-119
critical
9.3
2013-07-10 CVE-2012-5855 Numeric Errors vulnerability in Videolan VLC Media Player
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC.
network
videolan CWE-189
4.3
2012-03-19 CVE-2012-1776 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Videolan VLC Media Player
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
network
videolan CWE-119
critical
9.3