VLC Media Player WAV File Buffer Overflow Vulnerability

Bugtraq ID:	30058
Class:	Boundary Condition Error
CVE:	CVE-2008-2430
Remote:	Yes
Local:	No
Published:	Jul 02 2008 12:00AM
Updated:	Jun 18 2009 08:29PM
Credit:	Alin Rad Pop, Secunia Research
Vulnerable:	VideoLAN VLC media player 0.8.6 h Pardus Linux 2008 0 Pardus Linux 2007 0 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

VLC Media Player WAV File Buffer Overflow Vulnerability

VLC media player is prone to a buffer-overflow vulnerability because the WAV file decoder fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

VLC media player 0.8.6h is vulnerable; other versions may also be affected.

VLC Media Player WAV File Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VLC Media Player WAV File Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_amd64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_amd64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_amd64.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 ia-32

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_i386.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_i386.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-glide_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-glide_0. 8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-svgalib_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_i386.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 arm

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_arm.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_arm.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_arm.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 hppa

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_hppa.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_hppa.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_hppa.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 sparc

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_sparc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_sparc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_sparc.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 s/390

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_s390.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_s390.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_s390.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 powerpc

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_powerpc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_powerpc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_powerpc.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 alpha

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_alpha.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_alpha.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_alpha.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 armel

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 m68k

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 mipsel

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_mipsel.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_mipsel.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_mipsel.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 ia-64

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_ia64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_ia64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_ia64.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 mips

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_mips.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_mips.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_mips.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

VideoLAN VLC media player 0.8.6 h

• VideoLAN Changeset 3de60bf5b886ad81d7c05d68dff7a1ba461c0ac1
  https://trac.videolan.org/vlc/changeset/3de60bf5b886ad81d7c05d68dff7a1 ba461c0ac1

VLC Media Player WAV File Buffer Overflow Vulnerability

References:

• VLC Homepage (VideoLAN)
  
• Secunia Research: VLC Media Player WAV Processing Integer Overflow (Secunia Research )