GCVE - cpe:2.3:a:videolan:vlc_media_player:0.2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:videolan:vlc_media_player:0.2.0:*:*:*:*:*:*:*

part: a version: 0.2.0 update: *

Vendor	Videolan (`b1ef3618-afd2-52df-be05-50fdbdda8d58`)
Product	Vlc Media Player (`7235d722-37bb-5c15-baca-3fcb0f701e33`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/vlc`	purl2cpe	2026-06-01 10:16:43.429602
`pkg:deb/ubuntu/vlc`	purl2cpe	2026-06-01 10:16:43.429604
`pkg:github/videolan/vlc`	purl2cpe	2026-06-01 10:16:43.429605
`pkg:rpm/opensuse/vlc`	purl2cpe	2026-06-01 10:16:43.429607
`pkg:videolan/vlc`	purl2cpe	2026-06-01 10:16:43.429608

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-7340`	vulnerable	2026-06-08 05:05:09.894834	Details available VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file. Published: 2014-03-20T19:00:00.000Z Updated: 2024-09-16T22:20:05.242Z Open on db.gcve.eu Reference links http://www.videolan.org/developers/vlc-branch/NEWS	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3377`	vulnerable	2026-06-08 05:02:09.463683	Details available Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file. Published: 2012-07-12T21:00:00.000Z Updated: 2024-08-06T20:05:12.049Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/07/06/2 http://www.securitytracker.com/id?1027224 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15299 http://secunia.com/advisories/49835 http://www.securityfocus.com/bid/54345	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1776`	vulnerable	2026-06-08 05:00:50.897739	Details available Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream. Published: 2012-03-19T16:00:00.000Z Updated: 2024-08-06T19:08:38.511Z Open on db.gcve.eu Reference links http://www.videolan.org/security/sa1202.html http://www.securityfocus.com/bid/52550 http://osvdb.org/80189 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14817 https://exchange.xforce.ibmcloud.com/vulnerabilities/74118	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1775`	vulnerable	2026-06-08 05:00:50.808141	Details available Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream. Published: 2012-03-19T16:00:00.000Z Updated: 2024-08-06T19:08:38.509Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/53391 http://www.exploit-db.com/exploits/18825 http://www.securityfocus.com/bid/52550 http://www.videolan.org/security/sa1201.html http://git.videolan.org/?p=vlc/vlc-2.0.git%3Ba=commit%3Bh=11a95cce96fffdbaba1be6034d7b42721667821c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2588`	vulnerable	2026-06-08 04:58:07.688587	Details available Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file. Published: 2011-07-27T01:29:00.000Z Updated: 2024-08-06T23:08:23.776Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45066 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14858 http://www.videolan.org/security/sa1106.html http://www.securityfocus.com/bid/48664 https://exchange.xforce.ibmcloud.com/vulnerabilities/68532	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1931`	vulnerable	2026-06-08 04:58:03.049524	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0531`	vulnerable	2026-06-08 04:56:37.703973	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0021`	vulnerable	2026-06-08 04:56:33.462712	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3907`	vulnerable	2026-06-08 04:55:17.897874	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3276`	vulnerable	2026-06-08 04:55:13.924582	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3275`	vulnerable	2026-06-08 04:55:13.912729	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3124`	vulnerable	2026-06-08 04:55:12.763047	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.