tocsin

Debian/vlc: unknown

Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file.

Action: Upgrade vlc to 0.8.6.h-1 or later.

Affected

introducedfixedlast affected
00.8.6.h-1-

Fixed versions

0.8.6.h-1

Sources

published · modified · JSON