Approved changes feed: RSS · Atom

cpe:2.3:a:videolan:vlc_media_player:0.9.7:*:*:*:*:*:*:*

part: a version: 0.9.7 update: *

VendorVideolan (b1ef3618-afd2-52df-be05-50fdbdda8d58)
ProductVlc Media Player (7235d722-37bb-5c15-baca-3fcb0f701e33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/vlc purl2cpe 2026-06-01 10:16:43.481871
pkg:deb/ubuntu/vlc purl2cpe 2026-06-01 10:16:43.481873
pkg:github/videolan/vlc purl2cpe 2026-06-01 10:16:43.481874
pkg:rpm/opensuse/vlc purl2cpe 2026-06-01 10:16:43.481876
pkg:videolan/vlc purl2cpe 2026-06-01 10:16:43.481877

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1776 vulnerable 2026-06-08 05:00:50.899049 Details available
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
Published: 2012-03-19T16:00:00.000Z
Updated: 2024-08-06T19:08:38.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1775 vulnerable 2026-06-08 05:00:50.846846 Details available
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
Published: 2012-03-19T16:00:00.000Z
Updated: 2024-08-06T19:08:38.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2937 vulnerable 2026-06-08 04:55:11.669060 Details available
The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.
Published: 2010-08-20T17:00:00.000Z
Updated: 2024-08-07T02:46:48.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5276 vulnerable 2026-06-08 04:50:50.389652 Details available
Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.
Published: 2008-12-03T17:00:00.000Z
Updated: 2024-08-07T10:49:11.896Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.