CVE-2007-0256
VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
- Update to 0.8.6.c-1
Published Updated
PatchFirst · Latest vulnerabilities
vlc vulnerabilities · Page 7
Vulnerability published for vlc in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 123
CVE-2007-0017
Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX (libvcdx_plugin) plugin, in VideoLAN VLC 0.7.0 through 0.8.6 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an invalid URI, as demonstrated by a udp://-- URI in an M3U file.
- Update to 0.8.6-svn20061012.debian-1.2
Published UpdatedCVE-2005-4048
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
- Update to 0.8.4.debian-2
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.