VM
Product
VLC media player
116
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 35Medium 13Low 0
Watch
Add VLC media player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-5032 | – | Nov 10 | Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image… Affected: 0.5.0; 0.5.3; 0.6.0; 0.6.2; 0.7.0; 0.7.1; +30 more |
| CVE-2008-4686 | – | Oct 22 | Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary… Affected: 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4 |
| CVE-2008-4654 | – | Oct 22 | Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute… Affected: 0.9; 0.9.1; 0.9.2; 0.9.3; 0.9.4 |
| CVE-2008-4558 | – | Oct 15 | Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier… Affected: 0.9.2 |
| CVE-2008-3794 | – | Aug 26 | Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a… Affected: 0.8.6i |
| CVE-2008-3732 | – | Aug 20 | Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly… Affected: 0.8.6i |
| CVE-2008-2430 | – | Jul 7 | Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV… Affected: 0.8.6h |
| CVE-2008-0984 | – | Feb 26 | The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute… Affected: through 0.8.6d |
| CVE-2008-0295 | – | Jan 16 | Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote… Affected: through 0.8.6d |
| CVE-2008-0296 | – | Jan 16 | Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service… Affected: through 0.8.6d |
| CVE-2007-6262 | – | Dec 6 | A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2)… Affected: 0.8.6; 0.8.6a; 0.8.6b |
| CVE-2007-3467 | – | Jun 27 | Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a WAV file… Affected: through 0.8.6b |
| CVE-2007-3468 | – | Jun 27 | input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers… Affected: through 0.8.6b |
| CVE-2007-3316 | – | Jun 21 | Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code… Affected: 0.8.6a; 0.8.6b |
| CVE-2007-0256 | – | Jan 16 | VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file Affected: 0.8.6a |
| CVE-2007-0017 | – | Jan 3 | Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and… Affected: 0.7.0; 0.7.1; 0.7.2; 0.8.0; 0.8.1; 0.8.2; +4 more |