VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities

VLC Media Player 'sdpplin_parse()' RTSP and Unspecified Heap Based Buffer Overflow Vulnerabilities

VLC media player is prone to two heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.

Attackers can leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

NOTE: The exact impact of one of these issues is currently unknown. We will update this BID as more information emerges.

VLC 0.8.6d is vulnerable; other versions may also be affected.