vlc - several vulnerabilities

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2008-1768

  Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1)…

  vlc Debian
  Apr 24, 2008
• Unscored —
  CVE-2008-1769 Public exploit

  VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers …

  vlc Debian
  Apr 24, 2008
• Unscored —
  CVE-2008-1881 Public exploit EPSS 12%

  Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers t…

  vlc Debian
  Apr 17, 2008
• Unscored —
  CVE-2008-2147

  Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a mal…

  vlc Debian
  May 12, 2008
• Unscored —
  CVE-2008-2430

  Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attack…

  vlc Debian
  Jul 7, 2008
• Unscored —
  CVE-2008-3794 Public exploit EPSS 11%

  Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i al…

  vlc Debian
  Aug 26, 2008
• Unscored —
  CVE-2008-4686 Public exploit

  Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably…

  vlc Debian
  Oct 22, 2008
• Unscored —
  CVE-2008-5032 Public exploit EPSS 11%

  Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to exe…

  vlc Debian
  Nov 10, 2008