oss-sec mailing list archives
CVE request: VLC <1.0.6 Multiple issues
From: Alex Legler <a3li () gentoo org>
Date: Thu, 22 Apr 2010 20:30:33 +0200
Hi, in case there was no request from upstream yet: VLC media player suffers from various vulnerabilities when attempting to parse malformatted or overly long byte streams. * Heap buffer overflow vulnerability in A/52, DTS and MPEG Audio decoders * Invalid memory access in AVI, ASF, Matroska (MKV) demuxers * Invalid memory access in XSPF playlist parser * Inavlid memory access in ZIP archive decompressor * Heap buffer overflow in RTMP access http://www.videolan.org/security/sa1003.html Thanks, Alex -- Alex Legler | Gentoo Security / Ruby a3li () gentoo org | a3li () jabber ccc de
Attachment:
signature.asc
Description:
Current thread:
- CVE request: VLC <1.0.6 Multiple issues Alex Legler (Apr 22)
- Re: CVE request: VLC <1.0.6 Multiple issues Josh Bressers (Apr 28)