Multiple vulnerabilities in VLC media player

説明

Multiple vulnerabilities were found in VLC media player. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Vulnerability related to parsing compressed labels in mDNS messages can be exploited to cause denial of service;
2. Vulnerability related to parsing compressed labels in mDNS messages can be exploited to execute arbitrary code;
3. Vulnerability related to parsing the RDATA section in mDNS messages can be exploited to cause denial of service;
4. Out-of-bound read vulnerability can be exploited to cause a denial of service;
5. Vulnerability related to parsing mDNS messages in mdns_recv can be exploited to cause denial of service;
6. Vulnerability related to parsing mDNS messages can be exploited to cause denial of service;

オリジナルアドバイザリー

• sb-vlc309

エクスプロイテーション

Public exploits exist for this vulnerability.

関連製品

• VLC-media-player

CVEリスト

• CVE-2020-6071
  critical
• CVE-2020-6072
  critical
• CVE-2020-6073
  critical
• CVE-2020-6077
  critical
• CVE-2020-6078
  critical
• CVE-2020-6079
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com