Description (CNA)
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / VLC Media Player | affected Fixed in 3.0.7 |
CWE
CWE-120
References
- https://hackerone.com/reports/484398
- http://www.securityfocus.com/bid/108769
- https://usn.ubuntu.com/4074-1/
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html
- https://security.gentoo.org/glsa/201908-23
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html
ADP enrichment
No English description supplied.
- https://hackerone.com/reports/484398
- http://www.securityfocus.com/bid/108769
- https://usn.ubuntu.com/4074-1/
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html
- https://security.gentoo.org/glsa/201908-23
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html