MPlayer and VLC Player Real Data Transport Remote Integer Underflow Vulnerability
BID:35821
Info
MPlayer and VLC Player Real Data Transport Remote Integer Underflow Vulnerability
| Bugtraq ID: | 35821 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 27 2009 12:00AM |
| Updated: | May 11 2010 12:02PM |
| Credit: | tixxDZ of DZCORE Labs |
| Vulnerable: |
VideoLAN VLC media player 1.0 VideoLAN VLC media player 0.9.9 VideoLAN VLC media player 0.9.7 VideoLAN VLC media player 0.9.6 VideoLAN VLC media player 0.9.5 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoLAN VLC media player 0.9 VideoLAN VLC media player 0.8.6 i VideoLAN VLC media player 0.8.6 h VideoLAN VLC media player 0.8.6 g VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 VideoLAN VLC media player 0.9.8a VideoLAN VLC media player 0.8.6f VideoLAN VLC media player 0.8.6e VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Pardus Linux 2009 0 Pardus Linux 2008 0 MPlayer MPlayer 1.0.20060329 MPlayer MPlayer 1.0 pre6-r4 MPlayer MPlayer 1.0 pre6-3.3.5-20050130 MPlayer MPlayer 1.0 pre6 MPlayer MPlayer 1.0 pre5try2 MPlayer MPlayer 1.0 pre5try1 MPlayer MPlayer 1.0 pre5 MPlayer MPlayer 1.0 pre4 MPlayer MPlayer 1.0 pre3try2 MPlayer MPlayer 1.0 pre3 MPlayer MPlayer 1.0 pre2 MPlayer MPlayer 1.0 pre1 MPlayer MPlayer 0.92.1 MPlayer MPlayer 0.92 MPlayer MPlayer 0.91 MPlayer MPlayer 0.90 rc series MPlayer MPlayer 0.90 pre series MPlayer MPlayer 0.90 MPlayer MPlayer 0.9 0rc4 MPlayer MPlayer HEAD CVS MPlayer MPlayer 1.0rc2-4.2.1 MPlayer MPlayer 1.0rc2 MPlayer MPlayer 1.0pre7try2 MPlayer MPlayer 1.0 -rc1 MPlayer MPlayer 1.0 MPlayer MPlayer 0_92 CVS MPlayer MPlayer 0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 |
| Not Vulnerable: | |
Discussion
MPlayer and VLC Player Real Data Transport Remote Integer Underflow Vulnerability
MPlayer and VLC Player are prone to a remote integer-underflow vulnerability because they fail to properly bounds-check user-supplied input.
Successful exploits allow remote attackers to execute arbitrary machine code in the context of the vulnerable application. Failed exploit attempts likely cause denial-of-service conditions.
The following are vulnerable:
MPlayer 1.0rc2 and prior.
VLC Player 1.0.0 and prior.
MPlayer and VLC Player are prone to a remote integer-underflow vulnerability because they fail to properly bounds-check user-supplied input.
Successful exploits allow remote attackers to execute arbitrary machine code in the context of the vulnerable application. Failed exploit attempts likely cause denial-of-service conditions.
The following are vulnerable:
MPlayer 1.0rc2 and prior.
VLC Player 1.0.0 and prior.
Exploit / POC
MPlayer and VLC Player Real Data Transport Remote Integer Underflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
MPlayer and VLC Player Real Data Transport Remote Integer Underflow Vulnerability
Solution:
An update for VLC Player is available in the CVS repository. A third-party patch for MPlayer is available. Please see the references for details.
Debian Linux 5.0 ia-64
Debian Linux 5.0 alpha
Debian Linux 5.0 ia-32
Debian Linux 5.0 s/390
Debian Linux 5.0 mipsel
Debian Linux 5.0 hppa
Debian Linux 5.0 arm
Debian Linux 5.0 armel
Debian Linux 5.0 amd64
Debian Linux 5.0 mips
Debian Linux 5.0 powerpc
Debian Linux 5.0 sparc
Solution:
An update for VLC Player is available in the CVS repository. A third-party patch for MPlayer is available. Please see the references for details.
Debian Linux 5.0 ia-64
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_ia64.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_ia64.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_ia64.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_ia64.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_ia64.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_ia64.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_ia64.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_ia64.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_ia64.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_ia64.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_ia64.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_ia64.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_ia64.deb -
Debian vlc_0.8.6.h-4+lenny2.3_ia64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_ia64.deb
Debian Linux 5.0 alpha
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_alpha.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_alpha.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_alpha.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_alpha.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_alpha.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_alpha.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_alpha.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_alpha.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_alpha.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_alpha.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_alpha.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_alpha.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_alpha.deb -
Debian vlc_0.8.6.h-4+lenny2.3_alpha.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_alpha.deb
Debian Linux 5.0 ia-32
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_i386.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_i386.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_i386.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_i386.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_i386.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_i386.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_i386.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_i386.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_i386.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_i386.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_i386.deb -
Debian vlc-plugin-glide_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-glide_0. 8.6.h-4+lenny2.3_i386.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_i386.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_i386.deb -
Debian vlc-plugin-svgalib_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6.h-4+lenny2.3_i386.deb -
Debian vlc_0.8.6.h-4+lenny2.3_i386.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_i386.deb
Debian Linux 5.0 s/390
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_s390.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_s390.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_s390.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_s390.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_s390.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_s390.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_s390.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_s390.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_s390.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_s390.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_s390.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_s390.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_s390.deb -
Debian vlc_0.8.6.h-4+lenny2.3_s390.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_s390.deb
Debian Linux 5.0 mipsel
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_mipsel.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_mipsel.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_mipsel.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_mipsel.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_mipsel.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_mipsel.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_mipsel.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_mipsel.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_mipsel.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_mipsel.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_mipsel.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_mipsel.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_mipsel.deb -
Debian vlc_0.8.6.h-4+lenny2.3_mipsel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_mipsel.deb
Debian Linux 5.0 hppa
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_hppa.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_hppa.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_hppa.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_hppa.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_hppa.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_hppa.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_hppa.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_hppa.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_hppa.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_hppa.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_hppa.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_hppa.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_hppa.deb -
Debian vlc_0.8.6.h-4+lenny2.3_hppa.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_hppa.deb
Debian Linux 5.0 arm
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_arm.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_arm.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_arm.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_arm.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_arm.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_arm.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_arm.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_arm.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_arm.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_arm.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_arm.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_arm.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_arm.deb -
Debian vlc_0.8.6.h-4+lenny2.3_arm.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_arm.deb
Debian Linux 5.0 armel
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_armel.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_armel.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_armel.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_armel.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_armel.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_armel.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_armel.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_armel.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_armel.deb -
Debian vlc_0.8.6.h-4+lenny2.3_armel.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_armel.deb
Debian Linux 5.0 amd64
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_amd64.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_amd64.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_amd64.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_amd64.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_amd64.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_amd64.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_amd64.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_amd64.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_amd64.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_amd64.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_amd64.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_amd64.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_amd64.deb -
Debian vlc-plugin-svgalib_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-svgalib_ 0.8.6.h-4+lenny2.3_amd64.deb -
Debian vlc_0.8.6.h-4+lenny2.3_amd64.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_amd64.deb
Debian Linux 5.0 mips
-
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_mips.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_mips.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_mips.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_mips.deb
Debian Linux 5.0 powerpc
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_powerpc.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_powerpc.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_powerpc.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_powerpc.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_powerpc.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_powerpc.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_powerpc.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_powerpc.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_powerpc.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_powerpc.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_powerpc.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_powerpc.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_powerpc.deb -
Debian vlc_0.8.6.h-4+lenny2.3_powerpc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_powerpc.deb
Debian Linux 5.0 sparc
-
Debian libvlc0-dev_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0-dev_0.8.6.h -4+lenny2.3_sparc.deb -
Debian libvlc0_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/libvlc0_0.8.6.h-4+l enny2.3_sparc.deb -
Debian mozilla-plugin-vlc_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/mozilla-plugin-vlc_ 0.8.6.h-4+lenny2.3_sparc.deb -
Debian mplayer-dbg_1.0~rc2-17+lenny3.2_sparc.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer-dbg_1.0 ~rc2-17+lenny3.2_sparc.deb -
Debian mplayer_1.0~rc2-17+lenny3.2_sparc.deb
http://security.debian.org/pool/updates/main/m/mplayer/mplayer_1.0~rc2 -17+lenny3.2_sparc.deb -
Debian vlc-nox_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-nox_0.8.6.h-4+l enny2.3_sparc.deb -
Debian vlc-plugin-arts_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-arts_0.8 .6.h-4+lenny2.3_sparc.deb -
Debian vlc-plugin-esd_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-esd_0.8. 6.h-4+lenny2.3_sparc.deb -
Debian vlc-plugin-ggi_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-ggi_0.8. 6.h-4+lenny2.3_sparc.deb -
Debian vlc-plugin-jack_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-jack_0.8 .6.h-4+lenny2.3_sparc.deb -
Debian vlc-plugin-sdl_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-sdl_0.8. 6.h-4+lenny2.3_sparc.deb -
Debian vlc_0.8.6.h-4+lenny2.3_sparc.deb
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6.h-4+lenny 2.3_sparc.deb
References
MPlayer and VLC Player Real Data Transport Remote Integer Underflow Vulnerability
References:
References:
- MPlayer Homepage (MPlayer)
- Real pseudo-RTSP: prevent integer underflow (Rémi Denis-Courmont)
- VLC Homepage (VideoLAN)
- [DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing (tixxDZ