|
2018-05-28
|
CVE-2018-11516 |
The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file. |
Vlc_media_player
|
8.8
|
|
|
2017-05-29
|
CVE-2017-9301 |
plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file. |
Vlc_media_player
|
7.8
|
|
|
2017-05-29
|
CVE-2017-9300 |
plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file. |
Vlc_media_player
|
7.8
|
|
|
2017-05-23
|
CVE-2017-8313 |
Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file. |
Vlc_media_player
|
5.5
|
|
|
2017-05-23
|
CVE-2017-8312 |
Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file. |
Debian_linux,
Vlc_media_player
|
5.5
|
|
|
2017-05-23
|
CVE-2017-8311 |
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file. |
Vlc_media_player
|
7.8
|
|
|
2017-05-23
|
CVE-2017-8310 |
Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file. |
Vlc_media_player
|
5.5
|
|
|
2017-06-30
|
CVE-2017-10699 |
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a denial of service (application crash) or possibly code execution. |
Vlc_media_player
|
9.8
|
|
|
2016-06-08
|
CVE-2016-5108 |
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file. |
Debian_linux,
Vlc_media_player
|
9.8
|
|
|
|
2016-04-18
|
CVE-2016-3941 |
Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF." |
Ubuntu_linux,
Vlc_media_player
|
5.5
|
|