Description
Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.videolan.org/security/sa1003.html
Mailing List mailing-list
x_refsource_mlist
http://openwall.com/lists/oss-security/2010/04/28/4
Scores
EPSS
0.0338
EPSS Percentile
87.4%
Details
CWE
CWE-119
Status
published
Products (44)
videolan/vlc_media_player
0.5.0
videolan/vlc_media_player
0.5.1
videolan/vlc_media_player
0.5.2
videolan/vlc_media_player
0.5.3
videolan/vlc_media_player
0.6.0
videolan/vlc_media_player
0.6.1
videolan/vlc_media_player
0.6.2
videolan/vlc_media_player
0.7.0
videolan/vlc_media_player
0.7.1
videolan/vlc_media_player
0.7.2
... and 34 more
Published
Dec 26, 2014
Tracked Since
Feb 18, 2026