Vulnerabilities (CVE)

Filtered by vendor Videolan Subscribe
Filtered by product Vlc Media Player
Total 113 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-5470 1 Videolan 1 Vlc Media Player 2017-09-19 4.3 MEDIUM N/A
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file.
CVE-2012-0904 1 Videolan 1 Vlc Media Player 2017-09-19 4.3 MEDIUM N/A
VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.
CVE-2011-2194 1 Videolan 1 Vlc Media Player 2017-09-19 9.3 HIGH N/A
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
CVE-2011-1087 1 Videolan 1 Vlc Media Player 2017-09-19 7.6 HIGH N/A
Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.
CVE-2010-0364 1 Videolan 1 Vlc Media Player 2017-09-19 9.3 HIGH N/A
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field.
CVE-2016-5108 2 Debian, Videolan 2 Debian Linux, Vlc Media Player 2017-07-01 7.5 HIGH 9.8 CRITICAL
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
CVE-2017-9301 1 Videolan 1 Vlc Media Player 2017-06-06 6.8 MEDIUM 7.8 HIGH
plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file.
CVE-2016-3941 2 Canonical, Videolan 2 Ubuntu Linux, Vlc Media Player 2016-11-30 4.3 MEDIUM 5.5 MEDIUM
Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF."
CVE-2010-1445 1 Videolan 1 Vlc Media Player 2014-12-29 7.5 HIGH N/A
Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session.
CVE-2010-1441 1 Videolan 1 Vlc Media Player 2014-12-29 7.5 HIGH N/A
Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) A/52, (2) DTS, or (3) MPEG Audio decoder.
CVE-2010-1442 1 Videolan 1 Vlc Media Player 2014-12-29 7.5 HIGH N/A
VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.
CVE-2014-3441 1 Videolan 1 Vlc Media Player 2014-05-15 4.3 MEDIUM N/A
codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file.
CVE-2013-7340 1 Videolan 1 Vlc Media Player 2014-03-24 4.3 MEDIUM N/A
VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.