Page 3 of 25 results (0.007 seconds)

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2017-8310 – Gentoo Linux Security Advisory 201707-10

https://notcve.org/view.php?id=CVE-2017-8310

23 May 2017 — Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file. Lectura de fuera de límites del heap en la función CreateHtmlSubtitle en VLC versiones 2.2.x de VideoLAN, debido a la falta de comprobación de terminación de cadena permite a los atacantes leer datos más allá de la memoria asignada y potencialmente bloqu... • http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=blobdiff%3Bf=modules/codec/subsdec.c%3Bh=addd8c71f30d53558fffd19059b374be45cf0f8e%3Bhp=1b4276e299a2a6668047231d29ac705ae93076ba%3Bhb=7cac839692ab79dbfe5e4ebd4c4e37d9a8b1b328%3Bhpb=3477dba3d506de8d95bccef2c6b67861188f6c29 • CWE-125: Out-of-bounds Read •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-8312 – Gentoo Linux Security Advisory 201707-10

https://notcve.org/view.php?id=CVE-2017-8312

23 May 2017 — Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file. Una lectura fuera del límite de la pila en ParseJSS en VideoLAN VLC debido a la falta de comprobación de longitud de la cadena permite a los atacantes leer datos no inicializados de la pila por medio de un archivo de subtítulos creado. Several vulnerabilities have been found in VLC, the VideoLAN project's media player. Processing malformed su... • http://git.videolan.org/?p=vlc.git%3Ba=blobdiff%3Bf=modules/demux/subtitle.c%3Bh=5e4fcdb7f25b2819f5441156c7c0ea2a7d112ca3%3Bhp=2a75fbfb7c3f56b24b2e4498bbb8fe0aa2575974%3Bhb=611398fc8d32f3fe4331f60b220c52ba3557beaa%3Bhpb=075bc7169b05b004fa0250e4a4ce5516b05487a9 • CWE-125: Out-of-bounds Read •

CVSS: 9.8EPSS: 28%CPEs: 2EXPL: 2

CVE-2016-5108 – VideoLAN VLC Media Player 2.2.1 - 'DecodeAdpcmImaQT' Buffer Overflow

https://notcve.org/view.php?id=CVE-2016-5108

08 Jun 2016 — Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file. Desbordamiento de buffer en la función DecodeAdpcmImaQT en modules/codec/adpcm.c en VideoLAN VLC media player en versiones anteriores a 2.2.4 permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código arbitrario a través d... • https://packetstorm.news/files/id/140464 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 18%CPEs: 1EXPL: 0

CVE-2015-5949 – VLC 2.2.1 Arbitrary Pointer Dereference

https://notcve.org/view.php?id=CVE-2015-5949

21 Aug 2015 — VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing of arbitrary pointers. Vulnerabilidad en VideoLAN VLC media player 2.2.1, permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un archivo 3GP manipulado, lo que hace que se desencadene la liberación de punteros arbitrarios. Loren Maggiore of Trail of Bits disco... • http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00040.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2014-9629 – Debian Security Advisory 3150-1

https://notcve.org/view.php?id=CVE-2014-9629

02 Feb 2015 — Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value. Un desbordamiento de enteros en la función Encode en el archivo modules/codec/schroedinger.c en el reproductor multimedia VLC de VideoLAN versiones anteriores a 2.1.6 y versiones 2.2.x anteriores a 2.2.1, permite a atacantes remotos llevar a cabo ataques de des... • http://openwall.com/lists/oss-security/2015/01/20/5 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •