| Package | Affected versions | Patched versions |
|---|---|---|
| vlc media player | = 0.5.0= 0.5.1= 0.5.2= 0.5.3= 0.6.0= 0.6.1= 0.6.2= 0.7.0= 0.7.1= 0.7.2= 0.8.0= 0.8.1= 0.8.1337= 0.8.2= 0.8.4= 0.8.4a= 0.8.5= 0.8.6= 0.8.6a= 0.8.6b= 0.8.6c= 0.8.6d= 0.8.6e= 0.8.6f= 0.8.6g= 0.8.6h= 0.8.6i= 0.9.0= 0.9.1= 0.9.10= 0.9.2= 0.9.3= 0.9.4= 0.9.5= 0.9.6= 0.9.8a= 0.9.9= 0.9.9a= 1.0.0≤ 1.0.1 |
Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level function in modules/demux/avi/libavi.c; or (3) a crafted MP4 file, related to the __MP4_BoxDumpStructure function in modules/demux/mp4/libmp4.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free