Vulnerabilities (CVE)

Filtered by vendor Videolan Subscribe
Total 125 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-6262 1 Videolan 1 Vlc Media Player 2024-02-04 6.8 MEDIUM N/A
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."
CVE-2007-6682 1 Videolan 1 Vlc 2024-02-04 7.5 HIGH N/A
Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter.
CVE-2008-0296 2 Microsoft, Videolan 2 Windows, Vlc Media Player 2024-02-04 10.0 HIGH N/A
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string.
CVE-2007-0256 1 Videolan 1 Vlc Media Player 2024-02-04 7.8 HIGH N/A
VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
CVE-2007-3468 1 Videolan 1 Vlc Media Player 2024-02-04 7.8 HIGH N/A
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used.