Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 22 Apr 2010 20:30:33 +0200
From: Alex Legler <>
Subject: CVE request: VLC <1.0.6 Multiple issues


in case there was no request from upstream yet:

VLC media player suffers from various vulnerabilities when attempting
to parse malformatted or overly long byte streams.

* Heap buffer overflow vulnerability in A/52, DTS and MPEG Audio
* Invalid memory access in AVI, ASF, Matroska (MKV)
* Invalid memory access in XSPF playlist parser
* Inavlid memory access in ZIP archive decompressor
* Heap buffer overflow in RTMP access


Alex Legler | Gentoo Security / Ruby |

Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.