vlc player integer overflow
Published:		10.06.2011
Source:		BUGTRAQ
SecurityVulns ID:		11720
Type:		local
Level:		4/10
Description:		Integer overflow on XSPF playlists parsing.

Affected:		VLC : vlc 1.1
CVE:		CVE-2011-2194 (Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.)

Original document

DEBIAN, [SECURITY] [DSA 2257-1] vlc security update (10.06.2011)

Discuss:

Read or add your comments to this news (0 comments)