Description
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a VLC Media Player
Fixed in 3.0.7affected
References
- https://hackerone.com/reports/484398 ↗
- http://www.securityfocus.com/bid/108769 ↗
- https://usn.ubuntu.com/4074-1/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html ↗
- https://security.gentoo.org/glsa/201908-23 ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html ↗