Summary:Major memory corruption vulnerabilities have been discovered in the open-source VLC project.
Vulnerabilities have been discovered in some versions of the popular VLC media player which may allow a cyberattacker to corrupt memory and potentially execute arbitrary code.
According to security researcher Veysel Hatas, who posted the discovery on Full Disclosure last week, one of the vulnerabilities is a DEP access violation vulnerability and the other is a write access flaw.
The VideoLAN project is a community of non-profit developers who create open-source multimedia tools. The VLC player is one of the most well-known results of this project, and acts as a cross-platform multimedia player and framework that plays most multimedia files as well as DVDs, Audio CDs, VCDs, and various streaming protocols.
The first security vulnerability, discovered on 24 November last year, is a flaw which is triggered as user-supplied input is not properly sanitized when handling a specially crafted FLV file.
Source:
http://www.zdnet.com/article/vlc-vulnerabilities-exposed/
Postări populare
-
There are actually several ErsatzEmacs editors known under a common name MicroEmacs, or uemacs (for the similarity of u and the greek μ)....
-
Meet Ocean: The full-blown Linux based wireless web server that fits into your pocket Ocean, a mobile server launched by Redwood-based h...
-
These small, more adventurous Linux distros have some clear advantages -- but be aware of the downsides. Every time a new boutique Linu...
-
Did that shiny, elegant new Macbook make a not-so-tiny dent in your bank account? Don’t worry, you won’t have to burn holes in your pocket...
-
New Delhi: Days after a Mumbai-based retailer announced the India availability of the Lenovo S90 on Twitter, the company has now official...
