Videolan

Vlc Media Player

117 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2011-0531

  • EPSS 41.85%
  • Veröffentlicht 07.02.2011 21:00:16
  • Zuletzt bearbeitet 16.06.2026 23:27:34

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory co...

6.8

CVE-2011-0522

Exploit
  • EPSS 51.54%
  • Veröffentlicht 07.02.2011 21:00:15
  • Zuletzt bearbeitet 16.06.2026 23:27:33

The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a su...

9.3

CVE-2011-0021

  • EPSS 5.83%
  • Veröffentlicht 25.01.2011 19:00:04
  • Zuletzt bearbeitet 16.06.2026 23:26:38

Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video.

9.3

CVE-2010-3907

  • EPSS 5.83%
  • Veröffentlicht 03.01.2011 20:00:42
  • Zuletzt bearbeitet 16.06.2026 23:23:48

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Re...

9.3

CVE-2010-3124

Exploit
  • EPSS 12.51%
  • Veröffentlicht 26.08.2010 18:36:35
  • Zuletzt bearbeitet 16.06.2026 23:22:10

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located i...

5

CVE-2010-2937

  • EPSS 2.64%
  • Veröffentlicht 20.08.2010 18:00:02
  • Zuletzt bearbeitet 16.06.2026 23:21:47

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted medi...

9.3

CVE-2010-0364

Exploit
  • EPSS 6.58%
  • Veröffentlicht 21.01.2010 20:30:00
  • Zuletzt bearbeitet 16.06.2026 23:16:00

Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field.

9.3

CVE-2009-2484

Exploit
  • EPSS 35.11%
  • Veröffentlicht 16.07.2009 16:30:00
  • Zuletzt bearbeitet 16.06.2026 23:09:33

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execut...

5

CVE-2009-1045

Exploit
  • EPSS 9.22%
  • Veröffentlicht 23.03.2009 16:30:01
  • Zuletzt bearbeitet 16.06.2026 23:06:23

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action.

9.3

CVE-2008-5276

Exploit
  • EPSS 7.84%
  • Veröffentlicht 03.12.2008 17:30:00
  • Zuletzt bearbeitet 16.06.2026 22:59:37

Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buf...