VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities
BID:27221
Info
VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities
| Bugtraq ID: | 27221 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0295 CVE-2008-0296 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2008 12:00AM |
| Updated: | Apr 16 2008 12:29AM |
| Credit: | Luigi Auriemma discovered these issues. |
| Vulnerable: |
VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: | |
Discussion
VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities
VLC media player is prone to two heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
Attackers can leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
NOTE: The exact impact of one of these issues is currently unknown. We will update this BID as more information emerges.
VLC 0.8.6d is vulnerable; other versions may also be affected.
VLC media player is prone to two heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
Attackers can leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
NOTE: The exact impact of one of these issues is currently unknown. We will update this BID as more information emerges.
VLC 0.8.6d is vulnerable; other versions may also be affected.
Exploit / POC
VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities
The following proof-of-concept data is available:
m=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...more_than_3200_chars...AAAAA
or
a=Title:buffer;AAAAAAAAAAAAAAAAAAAAAAAAA...more_than_6400_chars...AAAAA
The following proof-of-concept data is available:
m=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...more_than_3200_chars...AAAAA
or
a=Title:buffer;AAAAAAAAAAAAAAAAAAAAAAAAA...more_than_6400_chars...AAAAA
Solution / Fix
VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the referenced advisories for details.
VideoLAN VLC media player 0.8.6
Solution:
Updates are available. Please see the referenced advisories for details.
VideoLAN VLC media player 0.8.6
-
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_alpha.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_amd64.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_arm.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_hppa.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_i386.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_ia64.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_mips.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_mipsel.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_powerpc.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_s390.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_sparc.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_alpha.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_amd64.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_arm.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_hppa.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_i386.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_ia64.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_mips.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_mipsel.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_powerpc.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_s390.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_sparc.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_arm.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_i386.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_mips.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_s390.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_alpha.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_amd64.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_arm.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_hppa.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_i386.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_ia64.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_mips.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_s390.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch2_all.deb
Architecture independent
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch2_all.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-glide_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-glide_0. 8.6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-svgalib_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_alpha.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_amd64.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_arm.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_hppa.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_i386.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_ia64.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_mips.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_mipsel.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_powerpc.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_s390.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_sparc.deb -
Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch2_all.deb
Architecture independent
http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch2_all.deb
References
VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities
References:
References:
- VLC Homepage (VideoLAN)
- VideoLAN (VLC) heap overflow in sdpplin_parse and possible heap overflow in Wind (Luigi Auriemma)