FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

vlc -- arbitrary code execution in Real RTSP and MMS support

Affected packages
vlc < 2.0.1,3

Details

VuXML ID 62f36dfd-ff56-11e1-8821-001b2134ef46
Discovery 2012-03-12
Entry 2012-09-15

Jean-Baptiste Kempf, on behalf of the VideoLAN project reports:

If successful, a malicious third party could crash the VLC media player process. Arbitrary code execution could be possible on some systems.

[source]

References

CVE Name CVE-2012-1775
CVE Name CVE-2012-1776
URL http://www.videolan.org/security/sa1201.html
URL http://www.videolan.org/security/sa1202.html

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.

OSZAR »