VideoLAN VLC Media Player MP4 Demuxer Remote Code Execution Vulnerability
BID:28007
Info
VideoLAN VLC Media Player MP4 Demuxer Remote Code Execution Vulnerability
| Bugtraq ID: | 28007 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0984 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 26 2008 12:00AM |
| Updated: | Apr 16 2008 12:29AM |
| Credit: | Felipe Manzano and Anibal Sacco from CORE Security Technologies are credited with the discovery of this vulnerability. |
| Vulnerable: |
VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Miro Miro 1.1 Miro Miro 1.0 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
VideoLAN VLC media player 0.8.6e |
Discussion
VideoLAN VLC Media Player MP4 Demuxer Remote Code Execution Vulnerability
VideoLAN VLC media player is prone to a remote code-execution vulnerability because it fails to adequately parse specially crafted MP4 files.
An attacker can exploit this issue to execute arbitrary code, which can result in the complete compromise of the computer. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to VideoLAN VLC media player 0.8.6e are vulnerable.
VideoLAN VLC media player is prone to a remote code-execution vulnerability because it fails to adequately parse specially crafted MP4 files.
An attacker can exploit this issue to execute arbitrary code, which can result in the complete compromise of the computer. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to VideoLAN VLC media player 0.8.6e are vulnerable.
Exploit / POC
VideoLAN VLC Media Player MP4 Demuxer Remote Code Execution Vulnerability
The following proof-of-concept code is available:
The following proof-of-concept code is available:
Solution / Fix
VideoLAN VLC Media Player MP4 Demuxer Remote Code Execution Vulnerability
Solution:
The vendor released VLC media player 0.8.6e to address this issue. Please see the references for more information.
VideoLAN VLC media player 0.8.6a
VideoLAN VLC media player 0.8.6c
VideoLAN VLC media player 0.8.6b
VideoLAN VLC media player 0.8.6 d
VideoLAN VLC media player 0.8.6
Solution:
The vendor released VLC media player 0.8.6e to address this issue. Please see the references for more information.
VideoLAN VLC media player 0.8.6a
-
VideoLAN vlc-0.8.6-CORE-2008-0130.patch
http://www.videolan.org/patches/vlc-0.8.6-CORE-2008-0130.patch
VideoLAN VLC media player 0.8.6c
-
VideoLAN vlc-0.8.6-CORE-2008-0130.patch
http://www.videolan.org/patches/vlc-0.8.6-CORE-2008-0130.patch
VideoLAN VLC media player 0.8.6b
-
VideoLAN vlc-0.8.6-CORE-2008-0130.patch
http://www.videolan.org/patches/vlc-0.8.6-CORE-2008-0130.patch
VideoLAN VLC media player 0.8.6 d
-
VideoLAN vlc-0.8.6-CORE-2008-0130.patch
http://www.videolan.org/patches/vlc-0.8.6-CORE-2008-0130.patch
VideoLAN VLC media player 0.8.6
-
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_alpha.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_amd64.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_arm.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_hppa.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_i386.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_ia64.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_mips.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_mipsel.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_powerpc.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_s390.deb -
Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch2_sparc.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_alpha.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_amd64.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_arm.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_hppa.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_i386.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_ia64.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_mips.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_mipsel.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_powerpc.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_s390.deb -
Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch2_sparc.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_arm.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_i386.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_mips.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_s390.deb -
Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_alpha.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_amd64.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_arm.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_hppa.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_i386.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_ia64.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_mips.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_s390.deb -
Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch2_all.deb
Architecture independent
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch2_all.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-glide_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-glide_0. 8.6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_alpha.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_amd64.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_arm.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_hppa.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_ia64.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_mips.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_mipsel.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_powerpc.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_s390.deb -
Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch2_sparc.deb -
Debian vlc-plugin-svgalib_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6-svn20061012.debian-5.1+etch2_i386.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_alpha.deb
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_alpha.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_amd64.deb
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_amd64.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_arm.deb
arm architecture (ARM)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_arm.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_hppa.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_i386.deb
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_i386.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_ia64.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_mips.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_mipsel.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_powerpc.deb
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_powerpc.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_s390.deb -
Debian vlc_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch2_sparc.deb -
Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch2_all.deb
Architecture independent
http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch2_all.deb -
VideoLAN vlc-0.8.6-CORE-2008-0130.patch
http://www.videolan.org/patches/vlc-0.8.6-CORE-2008-0130.patch
References
VideoLAN VLC Media Player MP4 Demuxer Remote Code Execution Vulnerability
References:
References:
- VLC Homepage (VideoLAN)
- CORE-2008-0130: VLC media player chunk context validation error (Core Security Technologies Advisories
- Security Advisory 0802 Arbitrary memory overwrite in the MP4 demuxer (VideoLAN)