Summary
It was discovered that VLC incorrectly handled certain media files. If a
user were tricked into opening a specially-crafted file, a remote attacker
could use this issue to cause VLC to crash, resulting in a denial of
service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | vlc | 3.0.8-0ubuntu18.04.1 |
Vulnerabilities 11
-
Unscored —
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer ov…
-
Unscored —
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds…
-
Unscored —
A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows…
-
Unscored —
A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result,…
-
Unscored —
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
-
Unscored —
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.…
-
Unscored —
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a r…
-
Unscored —
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a craft…
-
Unscored —
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
-
Unscored —
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use…
-
Unscored —
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-b…
References
-
report
https://ubuntu.com/security/CVE-2019-13962
-
report
https://ubuntu.com/security/CVE-2019-14437
-
report
https://ubuntu.com/security/CVE-2019-14438
-
report
https://ubuntu.com/security/CVE-2019-14498
-
report
https://ubuntu.com/security/CVE-2019-14533
-
report
https://ubuntu.com/security/CVE-2019-14534
-
report
https://ubuntu.com/security/CVE-2019-14535
-
report
https://ubuntu.com/security/CVE-2019-14776
-
report
https://ubuntu.com/security/CVE-2019-14777
-
report
https://ubuntu.com/security/CVE-2019-14778
-
report
https://ubuntu.com/security/CVE-2019-14970