Lucene search
Veracode Vulnerability DatabaseVERACODE:26871HistorySep 21, 2020 - 6:23 a.m.
Arbitrary Code Execution
2020-09-2106:23:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.004
Percentile
72.6%
vlc is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h when parsing an .ogg file.
References
git.videolan.org/?p=vlc.git&a=search&h=refs%2Fheads%2Fmaster&st=commit&s=cve-2019
lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html
lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
seclists.org/bugtraq/2019/Aug/36
security.gentoo.org/glsa/201909-02
usn.ubuntu.com/4131-1/
www.debian.org/security/2019/dsa-4504
www.videolan.org/security/sb-vlc308.html
Related
cvelist
cvelist
CVE-2019-14438
2019-08-29 17:33:21
nvd
nvd
CVE-2019-14438
2019-08-29 18:15:12
ubuntucve
ubuntucve
CVE-2019-14438
2019-08-29 00:00:00
debiancve
debiancve
CVE-2019-14438
2019-08-29 18:15:12
cve
cve
CVE-2019-14438
2019-08-29 18:15:12
prion
prion
Heap overflow
2019-08-29 18:15:00
osv
osv
CVE-2019-14438
2019-08-29 18:15:12
vlc - security update
2019-08-20 00:00:00
alpinelinux
alpinelinux
CVE-2019-14438
2019-08-29 18:15:12
threatpost
threatpost
VLC Media Player Allows Desktop Takeover Via Malicious Video Files
2019-08-19 20:59:13
nessus
nessus
Ubuntu 18.04 LTS : VLC vulnerabilities (USN-4131-1)
2019-09-12 00:00:00
openSUSE Security Update : vlc (openSUSE-2020-545)
2020-04-27 00:00:00
Debian DSA-4504-1 : vlc - security update
2019-08-22 00:00:00
ubuntu
ubuntu
VLC vulnerabilities
2019-09-11 00:00:00
openvas
openvas
VLC Media Player Multiple Vulnerabilities (sb-vlc308) - Windows
2019-08-20 00:00:00
Ubuntu: Security Advisory (USN-4131-1)
2019-09-12 00:00:00
VLC Media Player Multiple Vulnerabilities (sb-vlc308) - Mac OS X
2019-08-20 00:00:00
kaspersky
kaspersky
KLA11761 Multiple vulnerabilities in VLC media player
2019-08-29 00:00:00
freebsd
freebsd
vlc -- multiple vulnerabilities
2019-07-14 00:00:00
debian
debian
[SECURITY] [DSA 4504-1] vlc security update
2019-08-20 22:04:33
suse
suse
Security update for vlc (moderate)
2020-04-23 00:00:00
Security update for vlc (moderate)
2020-04-29 00:00:00
mageia
mageia
Updated vlc packages fixes security vulnerabilities
2019-08-31 16:22:36
gentoo
gentoo
VLC: Multiple vulnerabilities
2019-09-06 00:00:00