Browse CVEs

CRITICAL 9.8 CVE-2014-6440 VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service. Vlc after 2.1.4 Fix from $2,3002017-03-28 MEDIUM 6.8 CVE-2015-5949EPSS 13% VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP fi… Vlc Media Player after 2.2.1 Fix from $1,6002015-08-25 MEDIUM 6.8 CVE-2014-9598EPSS 6% The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial… Vlc Media Player Mitigation only Fix from $1,6002015-01-21 MEDIUM 6.8 CVE-2014-9597EPSS 7% The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause… Vlc Media Player Mitigation only Fix from $1,6002015-01-21 HIGH 7.5 CVE-2011-3623 Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted AS… Vlc Media Player after 1.0.1 Fix from $1,9502014-12-26 HIGH 7.5 CVE-2010-2062 Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and s… Vlc Media Player after 1.0.0 Fix from $1,9502014-12-26 HIGH 7.5 CVE-2010-1445 Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or poss… Vlc Media Player after 1.0.5 Fix from $1,9502014-12-26 HIGH 7.5 CVE-2010-1444 The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access an… Vlc Media Player after 1.0.5 Fix from $1,9502014-12-26 MEDIUM 5.0 CVE-2010-1443 The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote at… Vlc Media Player after 1.0.5 Fix from $1,6002014-12-26 HIGH 7.5 CVE-2010-1442 VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly… Vlc Media Player after 1.0.5 Fix from $1,9502014-12-26 HIGH 7.5 CVE-2010-1441 Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash… Vlc Media Player after 1.0.5 Fix from $1,9502014-12-26 HIGH 7.5 CVE-2013-6283EPSS 10% VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a lo… Vlc Media Player after 2.0.8 Fix from $1,9502013-10-25 MEDIUM 6.8 CVE-2013-4388 Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a… Vlc Media Player after 2.0.7 Fix from $1,6002013-10-11 HIGH 9.3 CVE-2013-1868EPSS 11% Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbi… Vlc Media Player after 2.0.4 Fix from $1,9502013-07-10 MEDIUM 6.8 CVE-2013-1954EPSS 6% The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash)… Vlc Media Player after 2.0.5 Fix from $1,6002013-07-10 MEDIUM 6.3 CVE-2013-3245 plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service… Vlc Media Player No fix yet Fix from $1,6002013-07-10 HIGH 9.3 CVE-2012-0023 Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote atta… Vlc Media Player Patch available Fix from $1,9502012-10-30 MEDIUM 6.8 CVE-2012-3377 Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows… Vlc Media Player after 2.0.1 Fix from $1,6002012-07-12 HIGH 9.3 CVE-2012-1775EPSS 44% Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream. Vlc Media Player after 2.0.0 Fix from $1,9502012-03-19 HIGH 9.3 CVE-2012-1776EPSS 5% Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash… Vlc Media Player after 2.0.0 Fix from $1,9502012-03-19 MEDIUM 6.8 CVE-2011-2587 Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows … Vlc Media Player Patch available Fix from $1,6002011-07-27 MEDIUM 6.8 CVE-2011-2588 Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote… Vlc Media Player after 1.1.10.1 Fix from $1,6002011-07-27 HIGH 9.3 CVE-2011-2194EPSS 9% Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (c… Vlc Media Player Mitigation only Fix from $1,9502011-06-24 MEDIUM 6.8 CVE-2011-1684 Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows… Vlc Media Player Patch available Fix from $1,6002011-05-03 HIGH 7.6 CVE-2011-1087EPSS 8% Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and applicat… Vlc Media Player No fix yet Fix from $1,9502011-05-03 HIGH 9.3 CVE-2010-3275EPSS 76% libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file,… Vlc Media Player after 1.1.7 Fix from $1,9502011-03-28 HIGH 9.3 CVE-2010-3276EPSS 7% libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file. Vlc Media Player after 1.1.7 Fix from $1,9502011-03-28 HIGH 9.3 CVE-2011-0531EPSS 42% demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (cr… Vlc Media Player after 1.1.6.1 Fix from $1,9502011-02-07 MEDIUM 6.8 CVE-2011-0522EPSS 52% The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in Vid… Vlc Media Player Patch available Fix from $1,6002011-02-07 HIGH 9.3 CVE-2011-0021EPSS 6% Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial o… Vlc Media Player after 1.1.5 Fix from $1,9502011-01-25