Description
VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.videolan.org/security/sa1003.html
Mailing List mailing-list
x_refsource_mlist
http://openwall.com/lists/oss-security/2010/04/28/4
Scores
EPSS
0.0301
EPSS Percentile
85.9%
Details
CWE
CWE-119
Status
published
Products (44)
videolan/vlc_media_player
0.5.0
videolan/vlc_media_player
0.5.1
videolan/vlc_media_player
0.5.2
videolan/vlc_media_player
0.5.3
videolan/vlc_media_player
0.6.0
videolan/vlc_media_player
0.6.1
videolan/vlc_media_player
0.6.2
videolan/vlc_media_player
0.7.0
videolan/vlc_media_player
0.7.1
videolan/vlc_media_player
0.7.2
... and 34 more
Published
Dec 26, 2014
Tracked Since
Feb 18, 2026