Vlc Media Player

vlc_media_player

Vendor: Videolan • 113 CVEs

CVEs (113)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-4558 1Videolan 1Vlc Media Player Apr 23, 2026 Oct 15, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.
CVE-2008-3794 1Videolan 1Vlc Media Player Apr 23, 2026 Aug 26, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, w...Show more Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow.Show less
CVE-2008-3732 1Videolan 1Vlc Media Player Apr 23, 2026 Aug 20, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file,...Show more Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-2430 1Videolan 1Vlc Media Player Apr 23, 2026 Jul 7, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.
CVE-2008-0984 2Miro Videolan 2Miro Player Vlc Media Player Apr 23, 2026 Feb 26, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
CVE-2008-0296 1Videolan 1Vlc Media Player Apr 23, 2026 Jan 16, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary...Show more Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string.Show less
CVE-2008-0295 1Videolan 1Vlc Media Player Apr 23, 2026 Jan 16, 2008 N/A· v4 N/A· v3 8.5 HIGH· v2 Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or...Show more Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.Show less
CVE-2007-6262 1Videolan 1Vlc Media Player Apr 23, 2026 Dec 6, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resul...Show more A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."Show less
CVE-2007-3468 1Videolan 1Vlc Media Player Apr 23, 2026 Jun 27, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.
CVE-2007-3467 1Videolan 1Vlc Media Player Apr 23, 2026 Jun 27, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a WAV file with a large sample rate.
CVE-2007-3316 1Videolan 1Vlc Media Player Apr 23, 2026 Jun 21, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Og...Show more Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets.Show less
CVE-2007-0256 1Videolan 1Vlc Media Player Apr 23, 2026 Jan 16, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
CVE-2007-0017 1Videolan 1Vlc Media Player Apr 23, 2026 Jan 3, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/a...Show more Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX (libvcdx_plugin) plugin, in VideoLAN VLC 0.7.0 through 0.8.6 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an invalid URI, as demonstrated by a udp://-- URI in an M3U file.Show less

Previous 1 2 3 4 56