Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 551
Alerts This Week
Warning Icon 1 551

Gentoo: GLSA-200807-13 Advisory: VLC Vulnerability & Execution Risk

gentoo
Calendar Grey July 31, 2008
Dist Gentoo Esm H88
The VLC media player on Gentoo has been flagged with several security issues that could enable unauthorized code execution. Immediate update is advised.
Multiple vulnerabilities in VLC may allow for the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200807-13 https://security.gentoo.org/ Severity: Normal Title: VLC: Multiple vulnerabilities Date: July 31, 2008 Bugs: #221959, #230692 ID: 200807-13

Synopsis ======= Multiple vulnerabilities in VLC may allow for the execution of arbitrary code.
Background ========= VLC is a cross-platform media player and streaming server.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-video/vlc < 0.8.6i >= 0.8.6i
========== * Remi Denis-Courmont reported that VLC loads plugins from the current working directory in an unsafe manner (CVE-2008-2147).
* Alin Rad Pop (Secunia Research) reported an integer ov...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround