Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 20 Jan 2011 11:57:13 -0500 (EST)
From: Josh Bressers <>
Cc: coley <>
Subject: Re: CVE request: heap corruption in VLC media player

This should only need one ID. Please use CVE-2011-0021.



----- Original Message -----
> From upstream git [1]:
> "This patch resolves two heap corruption vulnerabilities in the CDG
> decoder for VLC media player. In both cases, a failure to properly
> validate indexes into statically-sized arrays on the heap allows a
> maliciously crafted CDG video to corrupt the heap in a controlled
> manner, potentially leading to code execution."
> -Dan
> [1]

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.