Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

VLC Media Player < 2.0.5 Multiple Vulnerabilities

High

Synopsis

The remote host contains an application that is affected by multiple vulnerabilities

Description

The remote host contains VLC player, a multi-media application.

Versions of VLC media player earlier than 2.0.5 are potentially affected by the following vulnerabilities :

- An error exists in the file 'modules/codec/subsdec.c' ('libsubsdec_plugin.dll') that does not properly validate input and can allow a buffer overflow. Opening a specially crafted file can result in the execution of arbitrary code. Note that the subtitles feature must be enabled for successful exploitation.

- An error exists related to the 'freetype' renderer that does not properly validate input and can allow a buffer overflow. Opening a specially crafted file can result in the execution of arbitrary code.

- Unspecified errors exist related to 'libaiff_plugin.dll' and to the 'SWF' demuxer that have unspecified impact.

Solution

Upgrade to VLC Media Player version 2.0.5 or later.