Записи VideoLAN
128 опубликованных записей вендора videolan.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 7 · 5,5 %
- Pre-auth RCE
- 56
- С записью об исправлении
- 89,8 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer41
- CWE-189 Numeric Errors12
- CWE-125 Out-of-bounds Read11
- CWE-20 Improper Input Validation7
- CWE-399 Resource Management Errors6
- CWE-416 Use After Free6
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
128 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
60На этой неделе | CVE-2010-3275Готовый эксплойт | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an videolan · vlc media player · CWE-119 | Критическая9,3 | — | 75,5 % | 28 мар. 2011 г. |
54В плане | CVE-2008-4654Готовый эксплойт | Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4videolan · vlc media player · CWE-119 | Критическая9,3 | — | 57,5 % | 21 окт. 2008 г. |
50В плане | CVE-2012-1775Готовый эксплойт | Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS://videolan · vlc media player · CWE-119 | Критическая9,3 | — | 44,1 % | 19 мар. 2012 г. |
50В плане | CVE-2011-0531Готовый эксплойт | demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of sevideolan · vlc media player · CWE-20 | Критическая9,3 | — | 41,9 % | 7 февр. 2011 г. |
49В плане | CVE-2008-5036Готовый эксплойт | Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code vivideolan · vlc media player · CWE-119 | Критическая9,3 | — | 41,4 % | 10 нояб. 2008 г. |
48В плане | CVE-2009-2484Готовый эксплойт | Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Mvideolan · vlc media player · CWE-119 | Критическая9,3 | — | 35,1 % | 16 июл. 2009 г. |
46В плане | CVE-2016-5108Proof of concept | Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers videolan · vlc media player · CWE-119 | Критическая9,8 | — | 24,7 % | 8 июн. 2016 г. |
44В плане | CVE-2008-0296Proof of concept | Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTvideolan · vlc media player · CWE-119 | Критическая10,0 | — | 14,6 % | 16 янв. 2008 г. |
43В плане | CVE-2018-11529Готовый эксплойт | VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafvideolan · vlc media player · CWE-416 | Высокая8,0 | — | 37,0 % | 11 июл. 2018 г. |
42В плане | CVE-2011-0522Proof of concept | The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.videolan · vlc media player · CWE-119 | Средняя6,8 | — | 51,5 % | 7 февр. 2011 г. |
42В плане | CVE-2007-3316Эксплойта нет | Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of servideolan · vlc media player | Критическая9,3 | — | 17,1 % | 21 июн. 2007 г. |
42В плане | CVE-2008-0984Proof of concept | The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwritmiro · miro player · CWE-399 | Критическая9,3 | — | 15,3 % | 26 февр. 2008 г. |
41В плане | CVE-2008-3732Proof of concept | Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of servicevideolan · vlc media player · CWE-189 | Критическая9,3 | — | 13,4 % | 20 авг. 2008 г. |
41В плане | CVE-2010-3124Proof of concept | Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,videolan · vlc media player | Критическая9,3 | — | 12,5 % | 26 авг. 2010 г. |
40В плане | CVE-2013-1868Proof of concept | Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and exevideolan · vlc media player · CWE-119 | Критическая9,3 | — | 11,0 % | 10 июл. 2013 г. |
40В плане | CVE-2008-5032Proof of concept | Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code vvideolan · vlc media player · CWE-119 | Критическая9,3 | — | 10,7 % | 10 нояб. 2008 г. |
40В плане | CVE-2008-4686Proof of concept | Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow rvideolan · vlc media player · CWE-189 | Критическая9,3 | — | 9,9 % | 22 окт. 2008 г. |
40В плане | CVE-2011-2194Proof of concept | Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of svideolan · vlc media player · CWE-189 | Критическая9,3 | — | 9,2 % | 24 июн. 2011 г. |
40В плане | CVE-2014-6440Эксплойта нет | VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.videolan · vlc · CWE-119 | Критическая9,8 | — | 5,0 % | 28 мар. 2017 г. |
40В плане | CVE-2017-10699Эксплойта нет | avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy(videolan · vlc media player · CWE-787 | Критическая9,8 | — | 4,5 % | 30 июн. 2017 г. |
40В плане | CVE-2019-13962Эксплойта нет | lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it dovideolan · vlc media player · CWE-125 | Критическая9,8 | — | 3,6 % | 18 июл. 2019 г. |
40В плане | CVE-2019-12874Эксплойта нет | An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7.videolan · vlc media player · CWE-415 | Критическая9,8 | — | 2,4 % | 18 июн. 2019 г. |
39Наблюдать | CVE-2008-5276Эксплойта нет | Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows videolan · vlc media player · CWE-189 | Критическая9,3 | — | 7,8 % | 3 дек. 2008 г. |
39Наблюдать | CVE-2010-3276Эксплойта нет | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an videolan · vlc media player · CWE-119 | Критическая9,3 | — | 7,5 % | 28 мар. 2011 г. |
39Наблюдать | CVE-2010-0364Proof of concept | Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg fivideolan · vlc media player · CWE-119 | Критическая9,3 | — | 6,6 % | 21 янв. 2010 г. |
- CVE-2010-327560На этой неделе
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an
КритическаяCVSS 9,3Готовый эксплойтEPSS 76 %videolan · vlc media player28 мар. 2011 г.
- CVE-2008-465454В плане
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4
КритическаяCVSS 9,3Готовый эксплойтEPSS 58 %videolan · vlc media player21 окт. 2008 г.
- CVE-2012-177550В плане
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS://
КритическаяCVSS 9,3Готовый эксплойтEPSS 44 %videolan · vlc media player19 мар. 2012 г.
- CVE-2011-053150В плане
demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of se
КритическаяCVSS 9,3Готовый эксплойтEPSS 42 %videolan · vlc media player7 февр. 2011 г.
- CVE-2008-503649В плане
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code vi
КритическаяCVSS 9,3Готовый эксплойтEPSS 41 %videolan · vlc media player10 нояб. 2008 г.
- CVE-2009-248448В плане
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on M
КритическаяCVSS 9,3Готовый эксплойтEPSS 35 %videolan · vlc media player16 июл. 2009 г.
- CVE-2016-510846В плане
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers
КритическаяCVSS 9,8Proof of conceptEPSS 25 %videolan · vlc media player8 июн. 2016 г.
- CVE-2008-029644В плане
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RT
КритическаяCVSS 10,0Proof of conceptEPSS 15 %videolan · vlc media player16 янв. 2008 г.
- CVE-2018-1152943В плане
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via craf
ВысокаяCVSS 8,0Готовый эксплойтEPSS 37 %videolan · vlc media player11 июл. 2018 г.
- CVE-2011-052242В плане
The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.
СредняяCVSS 6,8Proof of conceptEPSS 52 %videolan · vlc media player7 февр. 2011 г.
- CVE-2007-331642В плане
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of ser
КритическаяCVSS 9,3Эксплойта нетEPSS 17 %videolan · vlc media player21 июн. 2007 г.
- CVE-2008-098442В плане
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrit
КритическаяCVSS 9,3Proof of conceptEPSS 15 %miro · miro player26 февр. 2008 г.
- CVE-2008-373241В плане
Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service
КритическаяCVSS 9,3Proof of conceptEPSS 13 %videolan · vlc media player20 авг. 2008 г.
- CVE-2010-312441В плане
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,
КритическаяCVSS 9,3Proof of conceptEPSS 13 %videolan · vlc media player26 авг. 2010 г.
- CVE-2013-186840В плане
Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and exe
КритическаяCVSS 9,3Proof of conceptEPSS 11 %videolan · vlc media player10 июл. 2013 г.
- CVE-2008-503240В плане
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code v
КритическаяCVSS 9,3Proof of conceptEPSS 11 %videolan · vlc media player10 нояб. 2008 г.
- CVE-2008-468640В плане
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow r
КритическаяCVSS 9,3Proof of conceptEPSS 10 %videolan · vlc media player22 окт. 2008 г.
- CVE-2011-219440В плане
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of s
КритическаяCVSS 9,3Proof of conceptEPSS 9 %videolan · vlc media player24 июн. 2011 г.
- CVE-2014-644040В плане
VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %videolan · vlc28 мар. 2017 г.
- CVE-2017-1069940В плане
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy(
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %videolan · vlc media player30 июн. 2017 г.
- CVE-2019-1396240В плане
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it do
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %videolan · vlc media player18 июл. 2019 г.
- CVE-2019-1287440В плане
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %videolan · vlc media player18 июн. 2019 г.
- CVE-2008-527639Наблюдать
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows
КритическаяCVSS 9,3Эксплойта нетEPSS 8 %videolan · vlc media player3 дек. 2008 г.
- CVE-2010-327639Наблюдать
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an
КритическаяCVSS 9,3Эксплойта нетEPSS 7 %videolan · vlc media player28 мар. 2011 г.
- CVE-2010-036439Наблюдать
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg fi
КритическаяCVSS 9,3Proof of conceptEPSS 7 %videolan · vlc media player21 янв. 2010 г.