Skip to main content

VLC Multimedia Player and Streamer Multiple vulnerabilities

Last Update Date: 4 Feb 2015 09:59 Release Date: 4 Feb 2015 3707 Views

RISK: Medium Risk

TYPE: Clients - Audio & Video

TYPE: Audio & Video

Multiple vulnerabilities were identified in VLC multimedia player and streamer. These could allow remote attackers to cause a denial of service (crash) or arbitrary code execution via crafted MP4 files.


Impact

  • Denial of Service
  • Remote Code Execution

System / Technologies affected

  • Version prior to 2.0.3-5+deb7u2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued a fix.
    Version 2.0.3-5+deb7u2 for the stable distribution (wheezy)

Vulnerability Identifier


Source


Related Link