FYI: Begin forwarded message:
Date: Thu, 22 Apr 2010 20:30:33 +0200 From: Alex Legler <[email protected]> To: [email protected] Subject: [oss-security] CVE request: VLC <1.0.6 Multiple issues Hi, in case there was no request from upstream yet: VLC media player suffers from various vulnerabilities when attempting to parse malformatted or overly long byte streams. * Heap buffer overflow vulnerability in A/52, DTS and MPEG Audio decoders * Invalid memory access in AVI, ASF, Matroska (MKV) demuxers * Invalid memory access in XSPF playlist parser * Inavlid memory access in ZIP archive decompressor * Heap buffer overflow in RTMP access http://www.videolan.org/security/sa1003.html Thanks, Alex -- Alex Legler | Gentoo Security / Ruby [email protected] | [email protected] _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
