Vulnerability index

Browse CVEs

91 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Vlc CRITICAL 9.8
CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

Fix: after 2.1.4
Fix from $2,300 2017-03-28
Vlc Media Player MEDIUM 6.8
CVE-2015-5949EPSS 13%

VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP fi…

Fix: after 2.2.1
Fix from $1,600 2015-08-25
Vlc Media Player MEDIUM 6.8
CVE-2014-9598EPSS 6%

The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial…

Mitigation only
Fix from $1,600 2015-01-21
Vlc Media Player MEDIUM 6.8
CVE-2014-9597EPSS 7%

The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause…

Mitigation only
Fix from $1,600 2015-01-21
Vlc Media Player HIGH 7.5
CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted AS…

Fix: after 1.0.1
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-2062

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and s…

Fix: after 1.0.0
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or poss…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1444

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access an…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Vlc Media Player MEDIUM 5.0
CVE-2010-1443

The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote at…

Fix: after 1.0.5
Fix from $1,600 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1442

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2010-1441

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash…

Fix: after 1.0.5
Fix from $1,950 2014-12-26
Vlc Media Player HIGH 7.5
CVE-2013-6283EPSS 10%

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a lo…

Fix: after 2.0.8
Fix from $1,950 2013-10-25
Vlc Media Player MEDIUM 6.8
CVE-2013-4388

Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a…

Fix: after 2.0.7
Fix from $1,600 2013-10-11
Vlc Media Player HIGH 9.3
CVE-2013-1868EPSS 11%

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbi…

Fix: after 2.0.4
Fix from $1,950 2013-07-10
Vlc Media Player MEDIUM 6.8
CVE-2013-1954EPSS 6%

The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash)…

Fix: after 2.0.5
Fix from $1,600 2013-07-10
Vlc Media Player MEDIUM 6.3
CVE-2013-3245

plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service…

No fix yet
Fix from $1,600 2013-07-10
Vlc Media Player HIGH 9.3
CVE-2012-0023

Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote atta…

Patch available
Fix from $1,950 2012-10-30
Vlc Media Player MEDIUM 6.8
CVE-2012-3377

Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows…

Fix: after 2.0.1
Fix from $1,600 2012-07-12
Vlc Media Player HIGH 9.3
CVE-2012-1775EPSS 44%

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.

Fix: after 2.0.0
Fix from $1,950 2012-03-19
Vlc Media Player HIGH 9.3
CVE-2012-1776EPSS 5%

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash…

Fix: after 2.0.0
Fix from $1,950 2012-03-19
Vlc Media Player MEDIUM 6.8
CVE-2011-2587

Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows …

Patch available
Fix from $1,600 2011-07-27
Vlc Media Player MEDIUM 6.8
CVE-2011-2588

Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote…

Fix: after 1.1.10.1
Fix from $1,600 2011-07-27
Vlc Media Player HIGH 9.3
CVE-2011-2194EPSS 9%

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (c…

Mitigation only
Fix from $1,950 2011-06-24
Vlc Media Player MEDIUM 6.8
CVE-2011-1684

Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows…

Patch available
Fix from $1,600 2011-05-03
Vlc Media Player HIGH 7.6
CVE-2011-1087EPSS 8%

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and applicat…

No fix yet
Fix from $1,950 2011-05-03
Vlc Media Player HIGH 9.3
CVE-2010-3275EPSS 76%

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file,…

Fix: after 1.1.7
Fix from $1,950 2011-03-28
Vlc Media Player HIGH 9.3
CVE-2010-3276EPSS 7%

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.

Fix: after 1.1.7
Fix from $1,950 2011-03-28
Vlc Media Player HIGH 9.3
CVE-2011-0531EPSS 42%

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (cr…

Fix: after 1.1.6.1
Fix from $1,950 2011-02-07
Vlc Media Player MEDIUM 6.8
CVE-2011-0522EPSS 52%

The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in Vid…

Patch available
Fix from $1,600 2011-02-07
Vlc Media Player HIGH 9.3
CVE-2011-0021EPSS 6%

Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial o…

Fix: after 1.1.5
Fix from $1,950 2011-01-25