Summary
ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in this advisory.
An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.
Vulnerabilities 22
-
High 8.0
VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be trigg…
-
High 7.8
An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a use…
-
High 7.5
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
-
Unscored —
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write d…
-
Unscored —
In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in t…
-
Unscored —
Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows at…
-
Unscored —CVE-2017-8311 Public exploit
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an inp…
-
Unscored —
Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap …
-
Unscored —
Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attac…
-
Unscored —
plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of servic…
-
Unscored —
plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a …
-
Unscored —
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute ar…
-
Unscored —
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 al…
-
Unscored —
libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based bu…
-
Unscored —
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer ov…
-
Unscored —
An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows r…
-
Unscored —
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code…
-
Unscored —
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
-
Unscored —
-
Unscored —
A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-base…
-
Unscored —
A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller …
-
Unscored —
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in fu…
Revision history
-
#2
Correction in References
-
#1
Initial version.
References
-
ABB CYBERSECURITY ADVISORY - PDF version
https://search.abb.com/library/Download.aspx?DocumentID=4HZM000603&LanguageCode=en&DocumentPartId=&Action=Launch