Saturday, October 22, 2016
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Internet Disruptions Were Caused By Attacked Connected Devices
TSMC, GlobalFoundries/Samsung To Present Their 7nm Platforms At IEDM
Hon Hai Gains Apple Mac Orders From Quanta
AT&T In Advanced Talks With Time Warner On Merger
LG's Next Flagship G6 Smartphone Won't be Modular
Samsung to Exchange Galaxy Note 7 with New Galaxy S8
Qualcomm Said to Be Near A Deal With NXP
AMD Revenue Forecast Falls Short of Estimates
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
Help make DVDInfoPro better with dvdinfomantis!!!
menu making
Optiarc AD-7260S review
cdrw trouble
 Home > News > General Computing > Vulnera...
Last 7 Days News : SU MO TU WE TH FR SA All News

Thursday, January 31, 2013
Vulnerability Affects Latest VLC Media Player

VideoLAN warned users of the v2.0.5 and earlier versions of the VLC media player that the software contain a critical vulnerability that can be potentially exploited by attackers to execute malicious code on computers.

According to the non-profit organization that develops the popular media player, the vulnerability is located in the VLC component responsible for playing ASF (Advanced Streaming Format) video files. "When parsing a specially crafted ASF movie, a buffer overflow might occur," VideoLAN wrote in a security advisor.

If successful, a malicious third party could trigger an invalid memory access, leading to a crash of VLC media player's process. In some cases attackers might exploit this issue to execute arbitrary code within the context of the application, although that has not been confirmed yet.

The issue is addressed in VLC media player 2.0.x source code repository by replacing a macro with a static inline and improved bounds checking, VideoLAN said. This patch is included in VLC's future 2.0.6 release, the next version of the media player, which is only available for testing purposes at the moment.

An alternative solution is to manually delete the vulnerable libasf_plugin.dll file from the VLC installation directory, VideoLAN said. This will disable the software's ability to play ASF videos.

Toshiba Is Samplpling New 8-Megapixel CMOS Image Sensor        All News        Samsung Showcases Its Future Commercial Displays at ISE 2013
Take A Virtual Walk Through Grand Canyon With Google Maps     General Computing News      Yahoo Blog Hijacked, Bitdefender Says

Get RSS feed Easy Print E-Mail this Message

Most Popular News
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2016 - All rights reserved -
Privacy policy - Contact Us .