Videolan

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-5276 1Videolan 1Vlc Media Player Apr 23, 2026 Dec 3, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file...Show more Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.Show less
CVE-2008-5036 1Videolan 1Vlc Media Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText functi...Show more Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.Show less
CVE-2008-5032 1Videolan 1Vlc Media Player Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom....Show more Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.Show less
CVE-2008-4686 1Videolan 1Vlc Media Player Apr 23, 2026 Oct 22, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vu...Show more Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654.Show less
CVE-2008-4654 1Videolan 1Vlc Media Player Apr 23, 2026 Oct 22, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with...Show more Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.Show less
CVE-2008-4558 1Videolan 1Vlc Media Player Apr 23, 2026 Oct 15, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.
CVE-2008-3794 1Videolan 1Vlc Media Player Apr 23, 2026 Aug 26, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, w...Show more Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a heap-based buffer overflow.Show less
CVE-2008-3732 1Videolan 1Vlc Media Player Apr 23, 2026 Aug 20, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file,...Show more Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-2430 1Videolan 1Vlc Media Player Apr 23, 2026 Jul 7, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.
CVE-2008-2147 1Videolan 1Vlc Apr 23, 2026 May 12, 2008 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory.
CVE-2008-1769 1Videolan 1Vlc Apr 23, 2026 Apr 25, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
CVE-2008-1768 1Videolan 1Vlc Apr 23, 2026 Apr 25, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow.
CVE-2008-1881 1Videolan 1Vlc Apr 23, 2026 Apr 17, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplet...Show more Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681.Show less
CVE-2008-1489 1Videolan 1Vlc Apr 23, 2026 Mar 25, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a hea...Show more Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984.Show less
CVE-2008-0984 2Miro Videolan 2Miro Player Vlc Media Player Apr 23, 2026 Feb 26, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
CVE-2007-6684 1Videolan 1Vlc Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, which triggers a NULL pointer dereference.
CVE-2007-6683 1Videolan 1Vlc Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT statement in an MP3 file, possibly an argu...Show more The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability.Show less
CVE-2007-6682 1Videolan 1Vlc Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter.
CVE-2007-6681 1Videolan 1Vlc Apr 23, 2026 Jan 17, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file.
CVE-2008-0296 1Videolan 1Vlc Media Player Apr 23, 2026 Jan 16, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary...Show more Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string.Show less

Previous 1 2 3 4 567 Next