CVE-2014-6440

概要

参考情報

• billblough.net/blog/2015/03/04/cve-2014-6440-heap-overflow-in-vlc-transcode-module · Exploit
• seclists.org/oss-sec/2015/q1/751 · Patch
• securityfocus.com/bid/72950 · Third Party Advisory
• videolan.org/developers/vlc-branch/NEWS · Release Notes
• security.gentoo.org/glsa/201603-08 · Third Party Advisory

vlc のその他の脆弱性

• CVE-2008-2147中 4.6Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under …
• CVE-2008-1769中 6.8VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds arra…
• CVE-2008-1768中 6.8Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Rea…
• CVE-2008-1881中 6.8Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary c…
• CVE-2008-1489中 6.8Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) an…