WID-SEC-W-2023-1516

DeutschShown in its original language — a full translation is planned for a future version.

VLC: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode

view advisory published 2020-06-08

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VLC ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder um einen Denial of Service Zustand herbeizuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-13428US	high7.8	2.46% (84th)	—	2020-06-08
A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to…

references

External citations — patches, advisories, analysis.

VLC Release 3.0.11 vom 2020-06-04external
National Vulnerability Database CVE-2020-13428 vom 2020-06-08external
Ubuntu Security Notice USN-6180-1 vom 2023-06-21external
WID-SEC-W-2023-1516 - CSAF Versionself
WID-SEC-2023-1516 - Portal Versionself
Debian Security Advisory DSA-4704 vom 2020-06-17external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan