Full Disclosure mailing list archives
CVE request: VLC <1.0.6 Multiple issues
From: Henri Salo <henri () nerv fi>
Date: Thu, 22 Apr 2010 22:39:38 +0300
FYI: Begin forwarded message: Date: Thu, 22 Apr 2010 20:30:33 +0200 From: Alex Legler <a3li () gentoo org> To: oss-security () lists openwall com Subject: [oss-security] CVE request: VLC <1.0.6 Multiple issues Hi, in case there was no request from upstream yet: VLC media player suffers from various vulnerabilities when attempting to parse malformatted or overly long byte streams. * Heap buffer overflow vulnerability in A/52, DTS and MPEG Audio decoders * Invalid memory access in AVI, ASF, Matroska (MKV) demuxers * Invalid memory access in XSPF playlist parser * Inavlid memory access in ZIP archive decompressor * Heap buffer overflow in RTMP access http://www.videolan.org/security/sa1003.html Thanks, Alex -- Alex Legler | Gentoo Security / Ruby a3li () gentoo org | a3li () jabber ccc de _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- CVE request: VLC <1.0.6 Multiple issues Henri Salo (Apr 22)