Vulnerability in VideoLAN VLC media player

Beschreibung

A vulnerability in the transcode module was found in VLC media player versions before 2.1.5. By exploiting this vulnerability malicious users can cause a denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a non-malicious input.

---

Technical details

This vulnerability can allow a corrupted stream to cause a buffer overflow on the heap.

NB: This vulnerability have no public CVSS rating so rating can be changed by the time.

Ursprüngliche Informationshinweise

• VLC news

CVE Liste

• CVE-2014-6440
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com