VL
Product
vlc
11
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add vlc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-6440 | 9.8 | Mar 28 | VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service Affected: through 2.1.4 |
| CVE-2026-102875 | 7.8 | Sep 29 | VLC media player before 3.0.24 Path Traversal via skins2 Affected: before 3.0.24 |
| CVE-2008-2147 | – | May 12 | Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories… Affected: through 0.8.6; 0.4.6; 0.5.0; 0.5.1; 0.5.1a; 0.5.2; +18 more |
| CVE-2008-1768 | – | Apr 25 | Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which… Affected: 0.1.99; 0.1.99a; 0.1.99b; 0.1.99c; 0.1.99d; 0.1.99e; +34 more |
| CVE-2008-1769 | – | Apr 25 | VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption Affected: 0.1.99; 0.1.99a; 0.1.99b; 0.1.99c; 0.1.99d; 0.1.99e; +34 more |
| CVE-2008-1881 | – | Apr 17 | Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file Affected: 0.8.6e |
| CVE-2008-1489 | – | Mar 25 | Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: 0.8.6e |
| CVE-2007-6681 | – | Jan 17 | Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA,… Affected: through 0.8.6d |
| CVE-2007-6683 | – | Jan 17 | The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT… Affected: 0.8.6d |
| CVE-2007-6684 | – | Jan 17 | The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, which triggers a NULL pointer… Affected: 0.8.6d |
| CVE-2007-6682 | – | Jan 17 | Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string… Affected: through 0.8.6d |
Showing 11