Filtered by vendor Videolan
Subscribe
Total
126 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2007-0256 | 1 Videolan | 1 Vlc Media Player | 2024-11-21 | 7.8 HIGH | N/A |
VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file. | |||||
CVE-2007-0017 | 1 Videolan | 1 Vlc Media Player | 2024-11-21 | 6.8 MEDIUM | N/A |
Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (3) vcd_log_handler functions in modules/access/vcdx/access.c in the VCDX (libvcdx_plugin) plugin, in VideoLAN VLC 0.7.0 through 0.8.6 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an invalid URI, as demonstrated by a udp://-- URI in an M3U file. | |||||
CVE-2023-46814 | 2 Microsoft, Videolan | 2 Windows, Vlc Media Player | 2024-02-28 | N/A | 7.8 HIGH |
A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM. | |||||
CVE-2023-47359 | 1 Videolan | 1 Vlc Media Player | 2024-02-28 | N/A | 9.8 CRITICAL |
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption. | |||||
CVE-2023-47360 | 1 Videolan | 1 Vlc Media Player | 2024-02-28 | N/A | 7.5 HIGH |
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. | |||||
CVE-2023-32570 | 2 Fedoraproject, Videolan | 2 Fedora, Dav1d | 2024-02-28 | N/A | 5.9 MEDIUM |
VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. |