CVE-2022-41325

概要

参考情報

• twitter.com/0xMitsurugi · Third Party Advisory
• debian.org/security/2022/dsa-5297 · Third Party Advisory
• synacktiv.com/sites/default/files/2022-11/vlc_vnc_int_overflow-CVE-2022-41325.pdf · Exploit
• videolan.org/security/sb-vlc3018.html · Vendor Advisory

vlc media player のその他の脆弱性

• CVE-2023-46814高 7.8A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute c…
• CVE-2023-47360高 7.5Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
• CVE-2023-47359緊急 9.8Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() an…
• CVE-2021-25804高 7.5A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.
• CVE-2021-25803高 7.1A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an o…