Denial of service vulnerabilities in VideoLAN VLC media player

Описание

Multiple serious vulnerabilities have been found in VideoLAN VLC media player. Malicious users can exploit these vulnerabilities to cause a denial of service or possibly have another unspecified impact.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in pluginsaudio_filterlibmpgatofixed32_plugin.dll can be exploited remotely via a specially designed file to cause a denial of service;
2. An unspecified vulnerability inpluginscodeclibflac_plugin.dll can be exploited remotely via a specially designed FLAC file to cause a denial of service.

NB: These vulnerabilities do not have any public CVSS rating so rating can be changed by the time.

Первичный источник обнаружения

• Multiple Crashes in VLC 2.2.4
  

Связанные продукты

• VLC-media-player

Список CVE

• CVE-2017-9301
  high
• CVE-2017-9300
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com