CVSS: 8.8EPSS: 19%CPEs: 3EXPL: 2CVE-2007-6262 – VideoLAN VLC Media Player 0.86 < 0.86d - ActiveX Remote Bad Pointer Initialization
https://notcve.org/view.php?id=CVE-2007-6262
06 Dec 2007 — A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability." Cierto control ActiveX de axvlc.dll en VideoLAN VLC 0.8.6 anterior a 0.8.6d permite a atacantes remotos ejecutar código de su elección mediante argumentos manipulados a las funciones (1) addTarget, (2) get... • https://www.exploit-db.com/exploits/4688 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2007-3467
https://notcve.org/view.php?id=CVE-2007-3467
27 Jun 2007 — Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a WAV file with a large sample rate. Desbordamiento de entero en la función the __status_Update en stats.c de VideoLAN VLC Media Player anterior a 0.8.6c permite a atacantes remotos provocar una denegación de servicio (caída) mediante un fichero WAV con una tasa de muestreo grande. • http://osvdb.org/42189 •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2007-3468
https://notcve.org/view.php?id=CVE-2007-3468
27 Jun 2007 — input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used. input.c en VideoLAN VLC Media Player anterior a 0.8.6c permite a atacantes remotos provocar una denegación de servicio (caída) mediante un fichero WAV artesanal que provoca que una variable i_nb_resamplers no inicializada sea usada. • http://osvdb.org/38992 •
CVSS: 9.3EPSS: 46%CPEs: 2EXPL: 0CVE-2007-3316
https://notcve.org/view.php?id=CVE-2007-3316
21 Jun 2007 — Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets. Múltiples vulnerabilidades de formato de cadena en las extensiones del VideoLAN VLC Media Player anterior al 0.8.6c permiten a atacantes remot... • http://osvdb.org/37379 •
CVSS: 7.8EPSS: 25%CPEs: 1EXPL: 3CVE-2007-0256 – VideoLAN VLC Media Player 0.8.6a - Denial of Service
https://notcve.org/view.php?id=CVE-2007-0256
16 Jan 2007 — VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file. VideoLAN VLC 0.8.6a permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) mediante un fichero .wmv manipulado. • https://www.exploit-db.com/exploits/3119 •
CVSS: 9.8EPSS: 55%CPEs: 10EXPL: 3CVE-2007-0017 – VideoLAN VLC Media Player 0.8.6 (PPC) - 'udp://' Format String (PoC)
https://notcve.org/view.php?id=CVE-2007-0017
03 Jan 2007 — Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX (libvcdx_plugin) plugin, in VideoLAN VLC 0.7.0 through 0.8.6 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an invalid URI, as demonstrated by a udp://-- URI in an M3U file. Múltiples vulnerabilidades de cadena d... • https://www.exploit-db.com/exploits/3069 • CWE-134: Use of Externally-Controlled Format String •