VLC Media Player Multiple Stack Based Buffer Overflow Vulnerabilities

Bugtraq ID:	32125
Class:	Boundary Condition Error
CVE:	CVE-2008-5032 CVE-2008-5036
Remote:	Yes
Local:	No
Published:	Nov 05 2008 12:00AM
Updated:	Mar 02 2012 06:00PM
Credit:	Tobias Klein
Vulnerable:	VideoLAN VLC media player 0.9.5 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoLAN VLC media player 0.9 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	VideoLAN VLC media player 0.9.6

VLC Media Player Multiple Stack Based Buffer Overflow Vulnerabilities

VLC media player is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Versions prior to VLC media player 0.9.6 are vulnerable.

VLC Media Player Multiple Stack Based Buffer Overflow Vulnerabilities

FrSIRT has developed working commercial exploits for these issues as part of the FrSIRT Exploits & PoCs Service. These exploits are not otherwise publicly available or known to be circulating in the wild.

The following exploits are available:

• /data/vulnerabilities/exploits/32125.pl
• /data/vulnerabilities/exploits/32125.rb

VLC Media Player Multiple Stack Based Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_amd64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_amd64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_amd64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_amd64.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 ia-32

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_i386.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_i386.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-glide_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-glide_0. 8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc-plugin-svgalib_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6-svn20061012.debian-5.1+etch3_i386.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_i386.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_i386.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 arm

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_arm.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_arm.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_arm.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_arm.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_arm.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 hppa

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_hppa.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_hppa.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_hppa.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_hppa.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 sparc

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_sparc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_sparc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_sparc.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_sparc.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 s/390

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_s390.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_s390.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_s390.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_s390.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_s390.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 powerpc

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_powerpc.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_powerpc.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_powerpc.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_powerpc.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 alpha

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_alpha.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_alpha.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_alpha.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_alpha.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 armel

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 m68k

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0

• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 mipsel

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_mipsel.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_mipsel.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_mipsel.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_mipsel.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 ia-64

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_ia64.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_ia64.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_ia64.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_ia64.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

Debian Linux 4.0 mips

• Debian libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6-s vn20061012.debian-5.1+etch3_mips.deb


• Debian libvlc0_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6-svn20 061012.debian-5.1+etch3_mips.deb


• Debian mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-nox_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6-svn20 061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8 .6-svn20061012.debian-5.1+etch3_all.deb


• Debian vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6-svn20061012.debian-5.1+etch3_mips.deb


• Debian vlc_0.8.6-svn20061012.debian-5.1+etch3_mips.deb
  http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn200610 12.debian-5.1+etch3_mips.deb


• Debian wxvlc_0.8.6-svn20061012.debian-5.1+etch3_all.deb
  http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn2006 1012.debian-5.1+etch3_all.deb

VLC Media Player Multiple Stack Based Buffer Overflow Vulnerabilities

References:

• FrSIRT Exploits & PoCs Service (FrSIRT)
  
• VideoLAN security advisory 0810 (Rémi Denis-Courmont)
  
• VLC Homepage (VideoLAN)
  
• [TKADV2008-011] VLC media player RealText Processing Stack Overflow Vulnerabilit (Tobias Klein )
  
• [TKADV2008-012] VLC media player cue Processing Stack Overflow Vulnerability (Tobias Klein )
  
• Security Advisory 0810 (VideoLAN)