Skip to content
OpenAdvisories

Package · Debian

vlc

123 known vulnerabilities.

34 results · Clear filters · Feed

  • Unscored —
    CVE-2021-25804 Public exploit

    A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the …

  • Unscored —
    CVE-2021-25801 Public exploit

    A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to c…

  • Unscored —
    CVE-2018-11529 Public exploit EPSS 40%

    VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute ar…

  • Unscored —
    CVE-2017-8311 Public exploit

    Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an inp…

  • Unscored —
    CVE-2016-5108 Public exploit EPSS 25%

    Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 all…

  • Unscored —
    CVE-2014-1684 Public exploit

    The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Play…

  • Unscored —
    CVE-2013-6283 Public exploit

    VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly e…

  • Unscored —
    CVE-2013-1868 Public exploit EPSS 11%

    Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of se…

  • Unscored —
    CVE-2012-5470 Public exploit

    libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2012-1775 Public exploit EPSS 44%

    Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2011-2194 Public exploit

    Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers t…

  • Unscored —
    CVE-2010-3275 Public exploit EPSS 76%

    libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2011-0531 Public exploit EPSS 42%

    demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to…

  • Unscored —
    CVE-2011-0522 Public exploit EPSS 52%

    The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/cod…

  • Unscored —
    CVE-2010-0364 Public exploit

    Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitra…

  • Unscored —
    CVE-2009-1045 Public exploit

    requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) vi…

  • Unscored —
    CVE-2008-5036 Public exploit EPSS 41%

    Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to exec…

  • Unscored —
    CVE-2008-5032 Public exploit EPSS 11%

    Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to exe…

  • Unscored —
    CVE-2008-4686 Public exploit

    Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably…

  • Unscored —
    CVE-2008-4654 Public exploit EPSS 58%

    Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Playe…

  • Unscored —
    CVE-2008-4558 Public exploit

    Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary…

  • Unscored —
    CVE-2008-3794 Public exploit EPSS 11%

    Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i al…

  • Unscored —
    CVE-2008-3732 Public exploit EPSS 13%

    Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to caus…

  • Unscored —
    CVE-2008-1769 Public exploit

    VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers …

  • Unscored —
    CVE-2008-1881 Public exploit EPSS 12%

    Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers t…

  • Unscored —
    CVE-2008-1489 Public exploit EPSS 12%

    Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial …

  • Unscored —
    CVE-2008-0073 Public exploit

    Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP serv…

  • Unscored —
    CVE-2008-0984 Public exploit EPSS 15%

    The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote …

  • Unscored —
    CVE-2007-6681 Public exploit EPSS 17%

    Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-6682 Public exploit EPSS 15%

    Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote a…

  • Unscored —
    CVE-2008-0296 Public exploit EPSS 15%

    Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows …

  • Unscored —
    CVE-2008-0295 Public exploit EPSS 11%

    Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Pla…

  • Unscored —
    CVE-2007-0256 Public exploit EPSS 12%

    VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.

  • Unscored —
    CVE-2007-0017 Public exploit EPSS 12%

    Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA…