Oval Definition:oval:org.cisecurity:def:43
Revision Date:2016-02-08Version:4
Title:DSA-3342-1 -- vlc -- security update
Description:Loren Maggiore of Trail of Bits discovered that the 3GP parser of VLC, a multimedia player and streamer, could dereference an arbitrary pointer due to insufficient restrictions on a writable buffer. This could allow remote attackers to execute arbitrary code via crafted 3GP files.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2015-5949
DSA-3342-1
Platform(s):Debian 8
Product(s):vlc
Definition Synopsis
  • Debian 8 is installed
  • AND vlc is earlier than 0:2.2.0~rc2-2+deb8u1
  • BACK