DeutschShown in its original language — a full translation is planned for a future version.
VLC: Mehrere Schwachstellen
view advisory published 2021-07-26
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VLC ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und einen Denial of Service Zustand herzustellen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25804US | high7.5 | Exploit | ||
A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application. | ||||
| CVE-2021-25803US | high7.1 | — | ||
A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi fil… | ||||
| CVE-2021-25802US | high7.1 | — | ||
A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. | ||||
| CVE-2021-25801US | high7.1 | Exploit | ||
A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. | ||||
02
references
External citations — patches, advisories, analysis.
- VideoLAN Security Advisory vom 2021-07-26external
- VideoLAN Security Advisory vom 2021-07-26external
- VideoLAN Security Advisory vom 2021-07-26external
- VideoLAN Security Advisory vom 2021-07-26external
- Debian Security Advisory DLA-2728 vom 2021-08-03external
- VideoLAN Security Advisory vom 2021-07-26external
- Ubuntu Security Notice USN-6180-1 vom 2023-06-21external
- WID-SEC-W-2023-1515 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan