VM
Product
VLC media player
115
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 35Medium 12Low 0
Watch
Add VLC media player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3941 | 5.5 | Apr 18 | Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a… Affected: through 2.1.6 |
| CVE-2013-3564 | 5.3 | Feb 6 | The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other… Affected: before 2.0.7 |
| CVE-2026-73324 | 4.3 | Sep 9 | VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability Affected: 3.0.0 through 3.0.23 |
| CVE-2015-5949 | – | Aug 25 | VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing… Affected: through 2.2.1 |
| CVE-2014-9743 | – | Aug 17 | Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers… Affected: through 2.1.6 |
| CVE-2014-9598 | – | Jan 21 | The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (write access… Affected: 2.1.5 |
| CVE-2014-9597 | – | Jan 21 | The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (DEP… Affected: 2.1.5 |
| CVE-2011-3623 | – | Dec 26 | Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the… Affected: through 1.0.1; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.6.0; +34 more |
| CVE-2010-2062 | – | Dec 26 | Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in… Affected: through 1.0.0; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.6.0; +33 more |
| CVE-2010-1445 | – | Dec 26 | Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code… Affected: through 1.0.5; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.6.0; +34 more |
| CVE-2010-1444 | – | Dec 26 | The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or… Affected: through 1.0.5; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.6.0; +34 more |
| CVE-2010-1443 | – | Dec 26 | The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of… Affected: through 1.0.5; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.6.0; +34 more |
| CVE-2010-1442 | – | Dec 26 | VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a… Affected: through 1.0.5; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.6.0; +34 more |
| CVE-2010-1441 | – | Dec 26 | Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute… Affected: through 1.0.5; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.6.0; +34 more |
| CVE-2014-3441 | – | May 14 | codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a… Affected: 2.1.3 |
| CVE-2013-7340 | – | Mar 21 | VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file Affected: through 2.0.6; 0.1.99a; 0.1.99b; 0.1.99c; 0.1.99d; 0.1.99e; +34 more |
| CVE-2014-1684 | – | Mar 3 | The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of… Affected: through 2.1.2; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +31 more |
| CVE-2013-6934 | – | Jan 23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service… Affected: before 2.1.0 |
| CVE-2013-6283 | – | Oct 25 | VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u… Affected: through 2.0.8; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +27 more |
| CVE-2013-4388 | – | Oct 11 | Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and… Affected: through 2.0.7; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +2 more |
| CVE-2013-1954 | – | Jul 10 | The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: through 2.0.5; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4 |
| CVE-2013-1868 | – | Jul 10 | Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related… Affected: through 2.0.4; 2.0.0; 2.0.1; 2.0.2; 2.0.3 |
| CVE-2012-5855 | – | Jul 10 | The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that… Affected: through 2.0.4; 2.0.0; 2.0.1; 2.0.2; 2.0.3 |
| CVE-2012-0023 | – | Oct 30 | Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of… Affected: 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; +28 more |
| CVE-2012-5470 | – | Oct 26 | libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file Affected: 2.0.3 |
| CVE-2012-3377 | – | Jul 12 | Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a… Affected: through 2.0.1; 0.1.99a; 0.1.99b; 0.1.99c; 0.1.99d; 0.1.99e; +34 more |
| CVE-2012-2396 | – | Apr 19 | VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file Affected: 2.0.1 |
| CVE-2012-1776 | – | Mar 19 | Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute… Affected: through 2.0.0; 0.1.99a; 0.1.99b; 0.1.99c; 0.1.99d; 0.1.99e; +34 more |
| CVE-2012-1775 | – | Mar 19 | Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream Affected: through 2.0.0; 0.1.99a; 0.1.99b; 0.1.99c; 0.1.99d; 0.1.99e; +34 more |
| CVE-2012-0904 | – | Jan 20 | VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file Affected: 1.1.11 |
| CVE-2011-2588 | – | Jul 27 | Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial… Affected: through 1.1.10.1; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2011-2587 | – | Jul 27 | Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a… Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.1.4.1; +8 more |
| CVE-2011-1931 | – | Jul 7 | sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products,… Affected: through 1.1.9; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2011-2194 | – | Jun 24 | Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: 0.8.5; 0.8.6; 0.8.6a; 0.8.6b; 0.8.6c; 0.8.6d; +34 more |
| CVE-2011-1684 | – | May 3 | Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +11 more |
| CVE-2011-1087 | – | May 3 | Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute… Affected: 1.0.5 |
| CVE-2010-3276 | – | Mar 28 | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file Affected: through 1.1.7; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2010-3275 | – | Mar 28 | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling… Affected: through 1.1.7; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2011-0522 | – | Feb 7 | The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1… Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.1.5; +1 more |
| CVE-2011-0531 | – | Feb 7 | demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary… Affected: through 1.1.6.1; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2011-0021 | – | Jan 25 | Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash)… Affected: through 1.1.5; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2010-3907 | – | Jan 3 | Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash)… Affected: through 1.1.5; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2010-3124 | – | Aug 26 | Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct… Affected: through 1.1.3; 0.1.99b; 0.1.99e; 0.1.99f; 0.1.99g; 0.1.99h; +34 more |
| CVE-2010-2937 | – | Aug 20 | The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote… Affected: 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; +16 more |
| CVE-2010-0364 | – | Jan 21 | Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation… Affected: 0.8.6 |
| CVE-2009-2484 | – | Jul 16 | Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote… Affected: 0.9.9 |
| CVE-2009-1045 | – | Mar 23 | requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action Affected: 0.9.8a |
| CVE-2008-5276 | – | Dec 3 | Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary… Affected: 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; +3 more |
| CVE-2008-5036 | – | Nov 10 | Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle… Affected: 0.9; 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; +1 more |
| CVE-2008-5032 | – | Nov 10 | Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image… Affected: 0.5.0; 0.5.3; 0.6.0; 0.6.2; 0.7.0; 0.7.1; +30 more |