Debian/vlc: high 7.8
The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow at
Action: Upgrade vlc to 2.2.0~rc2-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0~rc2-2 | - |
Fixed versions
| 2.2.0~rc2-2 |
Sources
published · modified · JSON