Re: [oCERT-2015-009] VLC arbitrary pointer dereference

[Alessandro Ghedini <alessandro () ghedini me>]

On Thu, Aug 20, 2015 at 03:01:39pm +0200, Andrea Barisani wrote:
> #2015-009 VLC arbitrary pointer dereference
>
> Description:
>
> The VLC media player is an open source media player and streaming media
> server.
>
> The stable VLC version suffers from an arbitrary pointer dereference
> vulnerability.
>
> The vulnerability affects the 3GP file format parser, insufficient
> restrictions on a writable buffer can be exploited to execute arbitrary code
> via the heap memory. A specific 3GP file can be crafted to trigger the
> vulnerability.

So, is there a reproducer for this issue that you can share?

Thanks

Attachment: signature.asc
Description: Digital signature