Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-41325

Опубликовано: 06 дек. 2022
Источник: debian

Описание

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
vlcfixed3.0.18-1package

Примечания

  • https://www.videolan.org/security/sb-vlc3018.html

  • https://code.videolan.org/videolan/vlc/-/issues/27335

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 2 лет назад

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

CVSS3: 7.8
nvd
больше 2 лет назад

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.

suse-cvrf
больше 2 лет назад

Security update for vlc

CVSS3: 4.7
redos
больше 2 лет назад

Уязвимость VLC

CVSS3: 7.8
github
больше 2 лет назад

An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.