Skip to content
OpenAdvisories
Unscored DSA-3150-1 5 CVEs

vlc - security update

Published Feb 2, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 vlc 2.0.3-5+deb7u2

Vulnerabilities 5

  • Unscored —
    CVE-2014-9626

    Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before …

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2014-9627

    The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an inc…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2014-9628

    The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote a…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2014-9629

    Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2…

    vlc vlc Debian Ubuntu
  • Unscored —
    CVE-2014-9630

    The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a …

    vlc vlc Debian Ubuntu