CVE-2010-1444
HighSummary
The ZIP archive decompressor in VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive.
Risk Assessment
An attacker could exploit this vulnerability to remotely crash the application or execute unauthorized code, posing a serious security threat to the system.
Recommendation
It is recommended to update VLC media player to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in VideoLAN VLC media player
See all- CVE-2011-3623High
Multiple stack-based buffer overflows in VideoLAN VLC media player before version 1.0.2 allow remote attackers to execute arbitrary code via crafted ASF, AVI, or MP4 files.
- CVE-2010-1445High
A heap-based buffer overflow in VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session.
- CVE-2010-1442High
VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.
- CVE-2010-1441High
Multiple heap-based buffer overflows in VideoLAN VLC media player before version 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the A/52, DTS, or MPEG Audio decoder.
- CVE-2014-6440Critical
VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
- CVE-2016-5108Critical
Buffer overflow in the DecodeAdpcmImaQT function in VideoLAN VLC media player before version 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
Original NVD description (English source)
The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive.