Skip to content
Noroxi

VideoLAN records

128 published records for vendor videolan.

Researcher profile

Entered KEV
0 · 0%
Weaponized
7 · 5.5%
Pre-auth RCE
56
With a fix record
89.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

128 records
  • CVE-2010-3275
    60This week

    libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an

    CriticalCVSS 9.3WeaponizedEPSS 75%

    videolan · vlc media playerMar 28, 2011

  • CVE-2008-4654
    54Plan

    Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4

    CriticalCVSS 9.3WeaponizedEPSS 57%

    videolan · vlc media playerOct 21, 2008

  • CVE-2012-1775
    50Plan

    Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS://

    CriticalCVSS 9.3WeaponizedEPSS 44%

    videolan · vlc media playerMar 19, 2012

  • CVE-2011-0531
    50Plan

    demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of se

    CriticalCVSS 9.3WeaponizedEPSS 41%

    videolan · vlc media playerFeb 7, 2011

  • CVE-2008-5036
    49Plan

    Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code vi

    CriticalCVSS 9.3WeaponizedEPSS 41%

    videolan · vlc media playerNov 10, 2008

  • CVE-2009-2484
    48Plan

    Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on M

    CriticalCVSS 9.3WeaponizedEPSS 35%

    videolan · vlc media playerJul 16, 2009

  • CVE-2016-5108
    46Plan

    Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    videolan · vlc media playerJun 8, 2016

  • CVE-2008-0296
    44Plan

    Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RT

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    videolan · vlc media playerJan 16, 2008

  • CVE-2018-11529
    43Plan

    VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via craf

    HighCVSS 8.0WeaponizedEPSS 36%

    videolan · vlc media playerJul 11, 2018

  • CVE-2011-0522
    42Plan

    The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.

    MediumCVSS 6.8Proof of conceptEPSS 51%

    videolan · vlc media playerFeb 7, 2011

  • CVE-2007-3316
    42Plan

    Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of ser

    CriticalCVSS 9.3No exploitEPSS 17%

    videolan · vlc media playerJun 21, 2007

  • CVE-2008-0984
    42Plan

    The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrit

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    miro · miro playerFeb 26, 2008

  • CVE-2008-3732
    41Plan

    Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    videolan · vlc media playerAug 20, 2008

  • CVE-2010-3124
    41Plan

    Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    videolan · vlc media playerAug 26, 2010

  • CVE-2013-1868
    40Plan

    Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and exe

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    videolan · vlc media playerJul 10, 2013

  • CVE-2008-5032
    40Plan

    Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code v

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    videolan · vlc media playerNov 10, 2008

  • CVE-2008-4686
    40Plan

    Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow r

    CriticalCVSS 9.3Proof of conceptEPSS 9%

    videolan · vlc media playerOct 22, 2008

  • CVE-2011-2194
    40Plan

    Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of s

    CriticalCVSS 9.3Proof of conceptEPSS 9%

    videolan · vlc media playerJun 24, 2011

  • CVE-2014-6440
    40Plan

    VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

    CriticalCVSS 9.8No exploitEPSS 4%

    videolan · vlcMar 28, 2017

  • CVE-2017-10699
    40Plan

    avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy(

    CriticalCVSS 9.8No exploitEPSS 4%

    videolan · vlc media playerJun 30, 2017

  • CVE-2019-13962
    40Plan

    lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it do

    CriticalCVSS 9.8No exploitEPSS 3%

    videolan · vlc media playerJul 18, 2019

  • CVE-2019-12874
    40Plan

    An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7.

    CriticalCVSS 9.8No exploitEPSS 2%

    videolan · vlc media playerJun 18, 2019

  • CVE-2008-5276
    39Monitor

    Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows

    CriticalCVSS 9.3No exploitEPSS 7%

    videolan · vlc media playerDec 3, 2008

  • CVE-2010-3276
    39Monitor

    libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an

    CriticalCVSS 9.3No exploitEPSS 7%

    videolan · vlc media playerMar 28, 2011

  • CVE-2010-0364
    39Monitor

    Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg fi

    CriticalCVSS 9.3Proof of conceptEPSS 6%

    videolan · vlc media playerJan 21, 2010