videolan Vulnerability Advisory Catalog

Total 120 security vulnerabilities recorded for videolan software and firmware.

← Back to All Vendors
CVE-2017-8312 MEDIUM
Component: vlc_media_player

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafte...

📅 2017-05-23
CVSS 5.5 Dossier →
Component: vlc_media_player

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to e...

📅 2017-05-23
CVSS 7.8 Dossier →
CVE-2017-8310 MEDIUM
Component: vlc_media_player

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond all...

📅 2017-05-23
CVSS 5.5 Dossier →
CVE-2014-6440 CRITICAL
Component: vlc

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service....

📅 2017-03-28
CVSS 9.8 Dossier →
CVE-2016-3941 MEDIUM
Component: vlc_media_player

Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denia...

📅 2016-04-18
CVSS 5.5 Dossier →
CVE-2015-5949 UNKNOWN
Component: vlc_media_player

VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP fil...

📅 2015-08-25
CVSS 6.8 Dossier →
CVE-2014-9743 UNKNOWN
Component: vlc_media_player

Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2...

📅 2015-08-17
CVSS 4.3 Dossier →
CVE-2014-9598 UNKNOWN
Component: vlc_media_player

The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial ...

📅 2015-01-21
CVSS 6.8 Dossier →
CVE-2014-9597 UNKNOWN
Component: vlc_media_player

The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause ...

📅 2015-01-21
CVSS 6.8 Dossier →
CVE-2011-3623 UNKNOWN
Component: vlc_media_player

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF...

📅 2014-12-26
CVSS 7.5 Dossier →
CVE-2010-2062 UNKNOWN
Component: vlc_media_player

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and st...

📅 2014-12-26
CVSS 7.5 Dossier →
CVE-2010-1445 UNKNOWN
Component: vlc_media_player

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possi...

📅 2014-12-26
CVSS 7.5 Dossier →
CVE-2010-1444 UNKNOWN
Component: vlc_media_player

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and...

📅 2014-12-26
CVSS 7.5 Dossier →
CVE-2010-1443 UNKNOWN
Component: vlc_media_player

The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote att...

📅 2014-12-26
CVSS 5.0 Dossier →
CVE-2010-1442 UNKNOWN
Component: vlc_media_player

VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly ...

📅 2014-12-26
CVSS 7.5 Dossier →
CVE-2010-1441 UNKNOWN
Component: vlc_media_player

Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash)...

📅 2014-12-26
CVSS 7.5 Dossier →
CVE-2014-3441 UNKNOWN
Component: vlc_media_player

codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as de...

📅 2014-05-14
CVSS 4.3 Dossier →
CVE-2013-7340 UNKNOWN
Component: vlc_media_player

VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file....

📅 2014-03-21
CVSS 4.3 Dossier →
CVE-2014-1684 UNKNOWN
Component: vlc_media_player

The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote a...

📅 2014-03-03
CVSS 4.3 Dossier →
CVE-2013-6283 UNKNOWN
Component: vlc_media_player

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a lon...

📅 2013-10-25
CVSS 7.5 Dossier →
CVE-2013-4388 UNKNOWN
Component: vlc_media_player

Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a ...

📅 2013-10-11
CVSS 6.8 Dossier →
CVE-2013-3245 MEDIUM
Component: vlc_media_player

plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service ...

📅 2013-07-10
CVSS 6.3 Dossier →
CVE-2013-1954 UNKNOWN
Component: vlc_media_player

The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) ...

📅 2013-07-10
CVSS 6.8 Dossier →
CVE-2013-1868 UNKNOWN
Component: vlc_media_player

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbit...

📅 2013-07-10
CVSS 9.3 Dossier →
Page 3 of 5 (120 Total Records)