Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Loren Maggiore

Researcher fromTrail of Bits
#39953of 53,635
6.8Total CVSS
Vulnerabilities · 1
PT-2015-3382
6.8
2015-08-20
Videolan · Vlc Media Player · CVE-2015-5949
**Name of the Vulnerable Software and Affected Versions** VideoLAN VLC media player version 2.2.1 **Description** The issue is related to a buffer overflow in memory, which can be triggered by a specially crafted .3GP file. This can allow a remote attacker to execute arbitrary code or cause a denial of service. **Recommendations** For version 2.2.1, consider avoiding the use of .3GP files until a patch is available. As a temporary workaround, restrict access to files with the .3GP extension to minimize the risk of exploitation.