Denial of service and arbitrary code execution vulnerabilities in VideoLAN VLC media player

Description

An unknown vulnerability was found in VLC media player. By exploiting this vulnerability malicious users can cause a denial of service or execute arbitrary code. This vulnerability can be exploited remotely via specially crafted QuickTime IMA file.

---

Technical details

This vulnerability related to DecodeAdpcmImaQT function in modules/codec/adpcm.c.

Original advisories

Related products

• VLC-media-player

CVE list

• CVE-2016-5108
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com