Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.805425
Kategorie:General
Titel:VLC Media Player Multiple Vulnerabilities Jan15 (Windows)
Zusammenfassung:The host is installed with VLC Media; player and is prone to multiple vulnerabilities.
Beschreibung:Summary:
The host is installed with VLC Media
player and is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws are due to:

- Improper input sanitization by 'picture_Release' function in
misc/picture.c.

- Improper input sanitization by 'picture_pool_Delete' function in
misc/picture_pool.c.

Vulnerability Impact:
Successful exploitation will allow remote
attackers to execute arbitrary code or cause a denial of service.

Affected Software/OS:
VideoLAN VLC media player 2.1.5 on
Windows.

Solution:
Upgrade to VideoLAN VLC media player
version 2.2.0-rc2 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: BugTraq ID: 72106
BugTraq ID: 72105
Common Vulnerability Exposure (CVE) ID: CVE-2014-9598
http://seclists.org/fulldisclosure/2015/Jan/72
https://security.gentoo.org/glsa/201603-08
http://www.binarysniper.net/2015/01/vlc-media-player-215-memory-corruption.html
https://trac.videolan.org/vlc/attachment/ticket/13390/windbglog.txt
https://trac.videolan.org/vlc/ticket/13390
Common Vulnerability Exposure (CVE) ID: CVE-2014-9597
https://trac.videolan.org/vlc/attachment/ticket/13389/windbglog.txt
https://trac.videolan.org/vlc/ticket/13389
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.