CPE Details
VideoLAN VLC Media Player 3.0.18 Release Candidate 2
3.0.18
2022-12-08
13h15 +00:00
13h15 +00:00
2022-12-08
17h23 +00:00
17h23 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:videolan:vlc_media_player:3.0.18:rc2:*:*:*:*:*:*
Informations
Vendor
videolanProduct
vlc_media_playerVersion
3.0.18Update
rc2Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM. | 7.8 |
High |
||
| Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption. | 9.8 |
Critical |
||
| Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. | 7.5 |
High |
