Attachment 215655 Details for Bug 247341 – vlc CVE-2020-13428 vuxml entry

[patch] vlc CVE-2020-13428 vuxml entry

CVE-2020-13428.diff (text/plain), 1.13 KB, created by rob2g2 on 2020-06-17 11:10:32 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: rob2g2

Created: 2020-06-17 11:10:32 UTC

Size: 1.13 KB

patch

obsolete

>--- vuln2.xml	Wed Jun 17 12:20:18 2020
>+++ vuln.xml	Wed Jun 17 13:07:27 2020
>@@ -60,0 +61,27 @@
>+  <vuln vid="77896891-b08a-11ea-937b-b42e99a1b9c3">
>+    <topic>vlc heap-based buffer overflow</topic>
>+    <affects>
>+      <package>
>+	<name>vlc</name>
>+	<range><lt>3.0.11</lt></range>
>+      </package>
>+    </affects>
>+    <description>
>+      <body xmlns="http://www.w3.org/1999/xhtml">
>+	<p>Thomas Guillem reports:</p>
>+	<blockquote cite="http://git.videolan.org/?p=vlc/vlc-3.0.git;a=commit;h=d5c43c21c747ff30ed19fcca745dea3481c733e0">
>+	  <p>A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11
>+      allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.</p>
>+	</blockquote>
>+      </body>
>+    </description>
>+    <references>
>+      <url>https://nvd.nist.gov/vuln/detail/CVE-2020-13428</url>
>+      <cvename>CVE-2020-13428</cvename>
>+   </references>
>+    <dates>
>+      <discovery>2020-05-27</discovery>
>+      <entry>2020-06-17</entry>
>+    </dates>
>+  </vuln>
>+

Actions: View | Diff

Attachments on bug 247341: 215655