CVE-2019-14970

概要

参考情報

• git.videolan.org · Patch
• lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html
• lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
• seclists.org/bugtraq/2019/Aug/36 · Mailing List
• security.gentoo.org/glsa/201909-02
• usn.ubuntu.com/4131-1
• debian.org/security/2019/dsa-4504 · Third Party Advisory
• videolan.org/security/sb-vlc308.html · Patch

vlc media player のその他の脆弱性

• CVE-2023-46814高 7.8A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute c…
• CVE-2023-47360高 7.5Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
• CVE-2023-47359緊急 9.8Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() an…
• CVE-2022-41325高 7.8An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a craf…
• CVE-2021-25804高 7.5A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.