Browse CVEs

HIGH 9.3 CVE-2010-3907EPSS 6% Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of… Vlc Media Player after 1.1.5 Fix from $1,9502011-01-03 HIGH 9.3 CVE-2010-3124EPSS 13% Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execu… Vlc Media Player after 1.1.3 Fix from $1,9502010-08-26 MEDIUM 5.0 CVE-2010-2937 The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 ta… Vlc Media Player Mitigation only Fix from $1,6002010-08-20 HIGH 9.3 CVE-2010-0364EPSS 7% Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a… Vlc Media Player No fix yet Fix from $1,9502010-01-21 HIGH 9.3 CVE-2009-2484EPSS 35% Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft … Vlc Media Player Patch available Fix from $1,9502009-07-16 MEDIUM 5.0 CVE-2009-1045EPSS 9% requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an … Vlc Media Player No fix yet Fix from $1,6002009-03-23 HIGH 9.3 CVE-2008-5276EPSS 8% Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote at… Vlc Media Player No fix yet Fix from $1,9502008-12-03 HIGH 9.3 CVE-2008-5036EPSS 41% Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an i… Vlc Media Player No fix yet Fix from $1,9502008-11-10 HIGH 9.3 CVE-2008-5032EPSS 11% Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the he… Vlc Media Player No fix yet Fix from $1,9502008-11-10 HIGH 9.3 CVE-2008-4686EPSS 10% Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote att… Vlc Media Player Mitigation only Fix from $1,9502008-10-22 HIGH 9.3 CVE-2008-4654EPSS 58% Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows r… Vlc Media Player No fix yet Fix from $1,9502008-10-22 MEDIUM 6.8 CVE-2008-4558EPSS 8% Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist fil… Vlc Media Player No fix yet Fix from $1,6002008-10-15 MEDIUM 6.8 CVE-2008-3794EPSS 11% Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execu… Vlc Media Player No fix yet Fix from $1,6002008-08-26 HIGH 9.3 CVE-2008-3732EPSS 13% Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (applica… Vlc Media Player No fix yet Fix from $1,9502008-08-20 HIGH 9.3 CVE-2008-2430EPSS 6% Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code … Vlc Media Player Mitigation only Fix from $1,9502008-07-07 MEDIUM 6.8 CVE-2008-1768 Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer… Vlc Mitigation only Fix from $1,6002008-04-25 MEDIUM 6.8 CVE-2008-1769EPSS 7% VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access … Vlc Mitigation only Fix from $1,6002008-04-25 MEDIUM 6.8 CVE-2008-1881EPSS 12% Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a… Vlc No fix yet Fix from $1,6002008-04-17 MEDIUM 6.8 CVE-2008-1489EPSS 12% Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibl… Vlc No fix yet Fix from $1,6002008-03-25 HIGH 7.5 CVE-2007-6681EPSS 17% Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle … Vlc after 0.8.6d Fix from $1,9502008-01-17 HIGH 7.5 CVE-2007-6682EPSS 15% Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary … Vlc after 0.8.6d Fix from $1,9502008-01-17 MEDIUM 5.0 CVE-2007-6683 The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a … Vlc No fix yet Fix from $1,6002008-01-17 MEDIUM 5.0 CVE-2007-6684 The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, whic… Vlc Mitigation only Fix from $1,6002008-01-17 HIGH 10.0 CVE-2008-0296EPSS 15% Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP server… Vlc Media Player after 0.8.6d Fix from $1,9502008-01-16 HIGH 8.5 CVE-2008-0295EPSS 11% Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows… Vlc Media Player after 0.8.6d Fix from $1,9502008-01-16 MEDIUM 6.8 CVE-2007-6262EPSS 11% A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to… Vlc Media Player Patch available Fix from $1,6002007-12-06 HIGH 7.8 CVE-2007-3467 Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of serv… Vlc Media Player after 0.8.6b Fix from $1,9502007-06-27 HIGH 7.8 CVE-2007-3468 input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an… Vlc Media Player after 0.8.6b Fix from $1,9502007-06-27 HIGH 9.3 CVE-2007-3316EPSS 17% Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (cra… Vlc Media Player Patch available Fix from $1,9502007-06-21 HIGH 7.8 CVE-2007-0256EPSS 12% VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file. Vlc Media Player No fix yet Fix from $1,9502007-01-16