vlc: multiple vulnerabilities [LWN.net]

Package(s):

vlc

CVE #(s):

CVE-2008-1881 CVE-2008-1489 CVE-2008-1768 CVE-2008-1769

Created:

April 23, 2008

Updated:

June 18, 2009

Description:

The latest set of vulnerabilities in vlc include a stack-based buffer overflow in the subtitle code (CVE-2008-1881), an integer overflow vulnerability in the MP4 code leading to a heap overflow (CVE-2008-1489), more integer overflows (CVE-2008-1768), and a "boundary error" in Cinepak leading to memory corruption (CVE-2008-1769).

Alerts:

Debian	DSA-1819-1	2009-06-18
Gentoo	200804-25	2008-04-23

(Log in to post comments)