Bug#595686: vlc: stack overflow

Michael Gilbert michael.s.gilbert at gmail.com
Sun Sep 5 19:58:23 UTC 2010


package: vlc
severity: important
tags: security

a stack overflow exploit was published for vlc [0].  i tried the poc on
unstable, and it didn't work, which is why i've set the severity only to
important.  that may be due to payload being windows-only?  you may want
to check with upstream to make sure that the linux version is indeed
not affected.

thanks,
mike

[0] http://www.exploit-db.com/exploits/14892/  





More information about the pkg-multimedia-maintainers mailing list