VLC Media Player MP4 Demuxer Buffer Overflow Vulnerability

Bugtraq ID:	28903
Class:	Boundary Condition Error
CVE:	CVE-2008-1768
Remote:	Yes
Local:	No
Published:	Apr 23 2008 12:00AM
Updated:	Jun 18 2009 07:59PM
Credit:	Drew Yao
Vulnerable:	VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 + Debian Linux 4.0 sparc + Debian Linux 4.0 s/390 + Debian Linux 4.0 powerpc + Debian Linux 4.0 mipsel + Debian Linux 4.0 mips + Debian Linux 4.0 m68k + Debian Linux 4.0 ia-64 + Debian Linux 4.0 ia-32 + Debian Linux 4.0 hppa + Debian Linux 4.0 arm + Debian Linux 4.0 amd64 + Debian Linux 4.0 alpha + Debian Linux 4.0 VideoLAN VLC media player 0.8.6e VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	VideoLAN VLC media player 0.8.6f

VLC Media Player MP4 Demuxer Buffer Overflow Vulnerability

VLC media player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Versions prior to VLC media player 0.8.6f are vulnerable.

VLC Media Player MP4 Demuxer Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VLC Media Player MP4 Demuxer Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_amd64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_amd64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_amd64.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 ia-32

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_i386.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_i386.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-glide_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-glide_0. 8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-svgalib_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_i386.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 arm

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_arm.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_arm.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_arm.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 hppa

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_hppa.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_hppa.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_hppa.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 sparc

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_sparc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_sparc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_sparc.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 s/390

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_s390.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_s390.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_s390.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 powerpc

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_powerpc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_powerpc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_powerpc.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

VideoLAN VLC media player 0.8.6a

• VideoLAN vlc-0.8.6f-win32.exe
  http://www.videolan.org/mirror-geo.php?file=vlc/0.8.6f/win32/vlc-0.8.6 f-win32.exe


• VideoLAN vlc-0.8.6f.tar.gz
  http://download.videolan.org/pub/videolan/vlc/0.8.6f/vlc-0.8.6f.tar.gz

Debian Linux 4.0 alpha

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_alpha.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_alpha.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_alpha.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 armel

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 m68k

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 mipsel

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_mipsel.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_mipsel.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_mipsel.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

VideoLAN VLC media player 0.8.6e

• VideoLAN vlc-0.8.6f-win32.exe
  http://www.videolan.org/mirror-geo.php?file=vlc/0.8.6f/win32/vlc-0.8.6 f-win32.exe


• VideoLAN vlc-0.8.6f.tar.gz
  http://download.videolan.org/pub/videolan/vlc/0.8.6f/vlc-0.8.6f.tar.gz

VideoLAN VLC media player 0.8.6c

• VideoLAN vlc-0.8.6f-win32.exe
  http://www.videolan.org/mirror-geo.php?file=vlc/0.8.6f/win32/vlc-0.8.6 f-win32.exe


• VideoLAN vlc-0.8.6f.tar.gz
  http://download.videolan.org/pub/videolan/vlc/0.8.6f/vlc-0.8.6f.tar.gz

Debian Linux 4.0 ia-64

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_ia64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_ia64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_ia64.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 mips

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_mips.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_mips.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_mips.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

VideoLAN VLC media player 0.8.6b

• VideoLAN vlc-0.8.6f-win32.exe
  http://www.videolan.org/mirror-geo.php?file=vlc/0.8.6f/win32/vlc-0.8.6 f-win32.exe


• VideoLAN vlc-0.8.6f.tar.gz
  http://download.videolan.org/pub/videolan/vlc/0.8.6f/vlc-0.8.6f.tar.gz

VideoLAN VLC media player 0.8.6 d

• VideoLAN vlc-0.8.6f-win32.exe
  http://www.videolan.org/mirror-geo.php?file=vlc/0.8.6f/win32/vlc-0.8.6 f-win32.exe


• VideoLAN vlc-0.8.6f.tar.gz
  http://download.videolan.org/pub/videolan/vlc/0.8.6f/vlc-0.8.6f.tar.gz

VideoLAN VLC media player 0.8.6

• VideoLAN vlc-0.8.6f-win32.exe
  http://www.videolan.org/mirror-geo.php?file=vlc/0.8.6f/win32/vlc-0.8.6 f-win32.exe


• VideoLAN vlc-0.8.6f.tar.gz
  http://download.videolan.org/pub/videolan/vlc/0.8.6f/vlc-0.8.6f.tar.gz

VLC Media Player MP4 Demuxer Buffer Overflow Vulnerability

References:

• VLC Homepage (VideoLAN)
  
• VLC Release Notes (VideoLan)
  
• VideoLan Security Advisory 0803 (VideoLan)