VideoLAN kayıtları
VideoLAN üreticisine ait 128 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 7 tanesi için hazır saldırı aracı var.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 7 · %5,5
- Pre-auth RCE
- 56
- Düzeltme kaydı olan
- %89,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer41
- CWE-189 Numeric Errors12
- CWE-125 Out-of-bounds Read11
- CWE-20 Improper Input Validation7
- CWE-399 Resource Management Errors6
- CWE-416 Use After Free6
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
128 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
60Bu hafta | CVE-2010-3275Silahlaştırılmış | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an videolan · vlc media player · CWE-119 | Kritik9,3 | %75,528 Mar 2011 |
54Planlayın | CVE-2008-4654Silahlaştırılmış | Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4videolan · vlc media player · CWE-119 | Kritik9,3 | %57,521 Eki 2008 |
50Planlayın | CVE-2012-1775Silahlaştırılmış | Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS://videolan · vlc media player · CWE-119 | Kritik9,3 | %43,619 Mar 2012 |
50Planlayın | CVE-2011-0531Silahlaştırılmış | demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of sevideolan · vlc media player · CWE-20 | Kritik9,3 | %41,87 Şub 2011 |
49Planlayın | CVE-2008-5036Silahlaştırılmış | Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code vivideolan · vlc media player · CWE-119 | Kritik9,3 | %41,410 Kas 2008 |
48Planlayın | CVE-2009-2484Silahlaştırılmış | Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Mvideolan · vlc media player · CWE-119 | Kritik9,3 | %35,116 Tem 2009 |
46Planlayın | CVE-2016-5108Kavram kanıtı | Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers videolan · vlc media player · CWE-119 | Kritik9,8 | %24,78 Haz 2016 |
44Planlayın | CVE-2018-11529Silahlaştırılmış | VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafvideolan · vlc media player · CWE-416 | Yüksek8,0 | %40,411 Tem 2018 |
44Planlayın | CVE-2008-0296Kavram kanıtı | Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTvideolan · vlc media player · CWE-119 | Kritik10,0 | %14,516 Oca 2008 |
42Planlayın | CVE-2011-0522Kavram kanıtı | The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.videolan · vlc media player · CWE-119 | Orta6,8 | %51,57 Şub 2011 |
42Planlayın | CVE-2007-3316İstismar yok | Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of servideolan · vlc media player | Kritik9,3 | %17,021 Haz 2007 |
42Planlayın | CVE-2008-0984Kavram kanıtı | The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwritmiro · miro player · CWE-399 | Kritik9,3 | %15,226 Şub 2008 |
41Planlayın | CVE-2008-3732Kavram kanıtı | Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of servicevideolan · vlc media player · CWE-189 | Kritik9,3 | %13,420 Ağu 2008 |
41Planlayın | CVE-2010-3124Kavram kanıtı | Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,videolan · vlc media player | Kritik9,3 | %12,526 Ağu 2010 |
40Planlayın | CVE-2013-1868Kavram kanıtı | Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and exevideolan · vlc media player · CWE-119 | Kritik9,3 | %10,910 Tem 2013 |
40Planlayın | CVE-2008-5032Kavram kanıtı | Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code vvideolan · vlc media player · CWE-119 | Kritik9,3 | %10,610 Kas 2008 |
40Planlayın | CVE-2008-4686Kavram kanıtı | Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow rvideolan · vlc media player · CWE-189 | Kritik9,3 | %9,922 Eki 2008 |
40Planlayın | CVE-2011-2194Kavram kanıtı | Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of svideolan · vlc media player · CWE-189 | Kritik9,3 | %9,124 Haz 2011 |
40Planlayın | CVE-2014-6440İstismar yok | VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.videolan · vlc · CWE-119 | Kritik9,8 | %4,928 Mar 2017 |
40Planlayın | CVE-2017-10699İstismar yok | avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy(videolan · vlc media player · CWE-787 | Kritik9,8 | %4,430 Haz 2017 |
40Planlayın | CVE-2019-13962İstismar yok | lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it dovideolan · vlc media player · CWE-125 | Kritik9,8 | %3,618 Tem 2019 |
40Planlayın | CVE-2019-12874İstismar yok | An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7.videolan · vlc media player · CWE-415 | Kritik9,8 | %2,318 Haz 2019 |
39İzleyin | CVE-2008-5276İstismar yok | Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows videolan · vlc media player · CWE-189 | Kritik9,3 | %7,83 Ara 2008 |
39İzleyin | CVE-2010-3276İstismar yok | libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an videolan · vlc media player · CWE-119 | Kritik9,3 | %7,428 Mar 2011 |
39İzleyin | CVE-2010-0364Kavram kanıtı | Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg fivideolan · vlc media player · CWE-119 | Kritik9,3 | %6,521 Oca 2010 |
- CVE-2010-327560Bu hafta
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an
KritikCVSS 9,3SilahlaştırılmışEPSS %75videolan · vlc media player28 Mar 2011
- CVE-2008-465454Planlayın
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4
KritikCVSS 9,3SilahlaştırılmışEPSS %57videolan · vlc media player21 Eki 2008
- CVE-2012-177550Planlayın
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS://
KritikCVSS 9,3SilahlaştırılmışEPSS %43videolan · vlc media player19 Mar 2012
- CVE-2011-053150Planlayın
demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of se
KritikCVSS 9,3SilahlaştırılmışEPSS %41videolan · vlc media player7 Şub 2011
- CVE-2008-503649Planlayın
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code vi
KritikCVSS 9,3SilahlaştırılmışEPSS %41videolan · vlc media player10 Kas 2008
- CVE-2009-248448Planlayın
Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on M
KritikCVSS 9,3SilahlaştırılmışEPSS %35videolan · vlc media player16 Tem 2009
- CVE-2016-510846Planlayın
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers
KritikCVSS 9,8Kavram kanıtıEPSS %24videolan · vlc media player8 Haz 2016
- CVE-2018-1152944Planlayın
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via craf
YüksekCVSS 8,0SilahlaştırılmışEPSS %40videolan · vlc media player11 Tem 2018
- CVE-2008-029644Planlayın
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RT
KritikCVSS 10,0Kavram kanıtıEPSS %14videolan · vlc media player16 Oca 2008
- CVE-2011-052242Planlayın
The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.
OrtaCVSS 6,8Kavram kanıtıEPSS %51videolan · vlc media player7 Şub 2011
- CVE-2007-331642Planlayın
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of ser
KritikCVSS 9,3İstismar yokEPSS %17videolan · vlc media player21 Haz 2007
- CVE-2008-098442Planlayın
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrit
KritikCVSS 9,3Kavram kanıtıEPSS %15miro · miro player26 Şub 2008
- CVE-2008-373241Planlayın
Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service
KritikCVSS 9,3Kavram kanıtıEPSS %13videolan · vlc media player20 Ağu 2008
- CVE-2010-312441Planlayın
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,
KritikCVSS 9,3Kavram kanıtıEPSS %12videolan · vlc media player26 Ağu 2010
- CVE-2013-186840Planlayın
Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and exe
KritikCVSS 9,3Kavram kanıtıEPSS %10videolan · vlc media player10 Tem 2013
- CVE-2008-503240Planlayın
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code v
KritikCVSS 9,3Kavram kanıtıEPSS %10videolan · vlc media player10 Kas 2008
- CVE-2008-468640Planlayın
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow r
KritikCVSS 9,3Kavram kanıtıEPSS %9videolan · vlc media player22 Eki 2008
- CVE-2011-219440Planlayın
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of s
KritikCVSS 9,3Kavram kanıtıEPSS %9videolan · vlc media player24 Haz 2011
- CVE-2014-644040Planlayın
VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
KritikCVSS 9,8İstismar yokEPSS %4videolan · vlc28 Mar 2017
- CVE-2017-1069940Planlayın
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy(
KritikCVSS 9,8İstismar yokEPSS %4videolan · vlc media player30 Haz 2017
- CVE-2019-1396240Planlayın
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it do
KritikCVSS 9,8İstismar yokEPSS %3videolan · vlc media player18 Tem 2019
- CVE-2019-1287440Planlayın
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7.
KritikCVSS 9,8İstismar yokEPSS %2videolan · vlc media player18 Haz 2019
- CVE-2008-527639İzleyin
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows
KritikCVSS 9,3İstismar yokEPSS %7videolan · vlc media player3 Ara 2008
- CVE-2010-327639İzleyin
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an
KritikCVSS 9,3İstismar yokEPSS %7videolan · vlc media player28 Mar 2011
- CVE-2010-036439İzleyin
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg fi
KritikCVSS 9,3Kavram kanıtıEPSS %6videolan · vlc media player21 Oca 2010