VideoLAN VLC Media Player 2.0.6
Approved changes feed: RSS · Atom
cpe:2.3:a:videolan:vlc_media_player:2.0.6:*:*:*:*:*:*:*
part: a version: 2.0.6 update: *
| Vendor | Videolan (b1ef3618-afd2-52df-be05-50fdbdda8d58) |
|---|---|
| Product | Vlc Media Player (7235d722-37bb-5c15-baca-3fcb0f701e33) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/vlc |
purl2cpe | 2026-06-01 10:16:43.492103 |
pkg:deb/ubuntu/vlc |
purl2cpe | 2026-06-01 10:16:43.492104 |
pkg:github/videolan/vlc |
purl2cpe | 2026-06-01 10:16:43.492106 |
pkg:rpm/opensuse/vlc |
purl2cpe | 2026-06-01 10:16:43.492107 |
pkg:videolan/vlc |
purl2cpe | 2026-06-01 10:16:43.492109 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-1684 |
vulnerable | 2026-06-08 05:05:25.912095 |
Details available
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.
Published: 2014-03-03T16:00:00.000Z
Updated: 2024-08-06T09:50:10.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6283 |
vulnerable | 2026-06-08 05:04:55.829462 |
Details available
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.
Published: 2013-10-25T23:00:00.000Z
Updated: 2024-08-06T17:39:01.091Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4388 |
vulnerable | 2026-06-08 05:04:35.933958 |
Details available
Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Published: 2013-10-11T22:00:00.000Z
Updated: 2024-08-06T16:45:13.511Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.