VideoLAN VLC Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	27015
Class:	Unknown
CVE:	CVE-2007-6681 CVE-2007-6682
Remote:	Yes
Local:	No
Published:	Dec 24 2007 12:00AM
Updated:	May 23 2008 04:34PM
Credit:	Michal Luczaj is credited with the discovery of the buffer-overflow vulnerabilities. Luigi Auriemma discovered the format-string vulnerability.
Vulnerable:	VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 + Debian Linux 4.0 sparc + Debian Linux 4.0 s/390 + Debian Linux 4.0 powerpc + Debian Linux 4.0 mipsel + Debian Linux 4.0 mips + Debian Linux 4.0 m68k + Debian Linux 4.0 ia-64 + Debian Linux 4.0 ia-32 + Debian Linux 4.0 hppa + Debian Linux 4.0 arm + Debian Linux 4.0 amd64 + Debian Linux 4.0 alpha + Debian Linux 4.0 VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

VideoLAN VLC Multiple Remote Code Execution Vulnerabilities

VideoLAN VLC media player is prone to multiple remote code-execution vulnerabilities, including multiple buffer-overflow issues and a format-string issue.

Exploiting these issues allows remote attackers to execute arbitrary machine code in the context of the affected application.

VLC 0.8.6d is vulnerable to these issues; other versions may also be affected.

VideoLAN VLC Multiple Remote Code Execution Vulnerabilities

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following proof-of-concept code and exploit are available:

• /data/vulnerabilities/exploits/vlcboffs.zip
• /data/vulnerabilities/exploits/27015.c
• /data/vulnerabilities/exploits/27015.py

VideoLAN VLC Multiple Remote Code Execution Vulnerabilities

Solution:
The vendor has committed fixes to the Subversion repository of VLC. Please see the references for more information.


VideoLAN VLC media player 0.8.6

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_alpha.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_amd64.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_hppa.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_i386.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_ia64.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_mips.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_mipsel.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_powerpc.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_s390.deb


• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_sparc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_alpha.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_amd64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_arm.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_hppa.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_i386.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_ia64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_mips.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_mipsel.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_powerpc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_s390.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_sparc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_alpha.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_amd64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_hppa.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_i386.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_ia64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_mips.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_s390.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_sparc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_alpha.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_amd64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_arm.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_hppa.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_i386.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_ia64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_mips.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_mipsel.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_powerpc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_s390.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_sparc.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch2_all.deb
  Architecture independent
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch2_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_alpha.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_amd64.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_arm.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_hppa.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_i386.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_ia64.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_mips.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_mipsel.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_powerpc.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_s390.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_sparc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb


• Debian vlc-plugin-glide_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-glide_0. 8.6-svn20061012.debian-5.1+etch2_i386.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb


• Debian vlc-plugin-svgalib_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6-svn20061012.debian-5.1+etch2_i386.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
  alpha architecture (DEC Alpha)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_alpha.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
  amd64 architecture (AMD x86_64 (AMD64))
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_amd64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
  arm architecture (ARM)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_arm.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
  hppa architecture (HP PA RISC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_hppa.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
  i386 architecture (Intel ia32)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_i386.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
  ia64 architecture (Intel ia64)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_ia64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
  mips architecture (MIPS (Big Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_mips.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
  mipsel architecture (MIPS (Little Endian))
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_mipsel.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
  powerpc architecture (PowerPC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_powerpc.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
  s390 architecture (IBM S/390)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_s390.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_sparc.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch2_all.deb
  Architecture independent
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch2_all.deb

VideoLAN VLC Multiple Remote Code Execution Vulnerabilities

References:

• [vlc-devel] subtitle processing overflows (Michal Luczaj)
  
• Changeset 23839 (VideoLAN)
  
• VLC Homepage (VideoLAN)
  
• Buffer-overflow and format string in VideoLAN VLC 0.8.6d (Luigi Auriemma )