
CVE-2014-9630 – Debian Security Advisory 3150-1
https://notcve.org/view.php?id=CVE-2014-9630
02 Feb 2015 — The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted length value. La función rtp_packetize_xiph_config en el archivo modules/stream_out/rtpfmt.c en el reproductor multimedia VLC de VideoLAN versiones anteriores a 2.1.6, utiliza un enfoq... • http://openwall.com/lists/oss-security/2015/01/20/5 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2014-9627 – Debian Security Advisory 3150-1
https://notcve.org/view.php?id=CVE-2014-9627
02 Feb 2015 — The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size. La función MP4_ReadBox_String en el archivo modules/demux/mp4/libmp4.c en el reproductor multimedia VLC de VideoLAN versiones anteriores a 2.1.6, realiza una operación de conversión incorrecta de un entero... • http://openwall.com/lists/oss-security/2015/01/20/5 • CWE-704: Incorrect Type Conversion or Cast •

CVE-2013-7340
https://notcve.org/view.php?id=CVE-2013-7340
20 Mar 2014 — VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file. VideoLAN VLC Media Player anterior a 2.0.7 permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un archivo de lista de reproducción manipulado. • http://www.videolan.org/developers/vlc-branch/NEWS • CWE-399: Resource Management Errors •

CVE-2014-1684 – VideoLAN VLC Media Player 2.1.2 - '.asf' Crash (PoC)
https://notcve.org/view.php?id=CVE-2014-1684
06 Feb 2014 — The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file. La función ASF_ReadObject_file_properties en modules/demux/asf/libasf.c en el Demuxer ASF en VideoLAN VLC Media Player anterior a 2.1.3 permite a atacantes remotos causar una denegación de servicio (error de división por cero y... • https://packetstorm.news/files/id/125080 • CWE-189: Numeric Errors •

CVE-2013-6934 – Gentoo Linux Security Advisory 201411-01
https://notcve.org/view.php?id=CVE-2013-6934
23 Jan 2014 — The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933. La función parseRTSPRequestString en Live Networks Live555 Streaming Media 2... • http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html • CWE-189: Numeric Errors •

CVE-2013-6283 – VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)
https://notcve.org/view.php?id=CVE-2013-6283
25 Oct 2013 — VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file. VideoLAN VLC Media Player 2.0.8 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (cuelgue) y posiblemente ejecutar código arbitrario a través de una cadena larga con la URL de un archivo m3u. Multiple vulnerabilities have been found in VLC, the worst of which could lead to user-assisted exe... • https://www.exploit-db.com/exploits/27700 • CWE-20: Improper Input Validation •

CVE-2013-4388 – Gentoo Linux Security Advisory 201411-01
https://notcve.org/view.php?id=CVE-2013-4388
11 Oct 2013 — Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Desbordamiento de buffer en el empaquetador mp4a (modules/packetizer/mpeg4audio.c) en VideoLAN VLC Media Player anterior a la versión 2.0.8 permite a atacantes remotos provocar una denegación de servicio (cuelgue) y posiblemente ejecutar código arbitrario a través de vectore... • http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=9794ec1cd268c04c8bca13a5fae15df6594dff3e • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •