The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player prior to 1.0.6 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
videolan vlc media player 0.8.6b |
||
videolan vlc media player 0.7.2 |
||
videolan vlc media player 0.8.6g |
||
videolan vlc media player 0.8.1337 |
||
videolan vlc media player 0.5.0 |
||
videolan vlc media player 0.8.4a |
||
videolan vlc media player 1.0.3 |
||
videolan vlc media player 0.8.0 |
||
videolan vlc media player 0.9.0 |
||
videolan vlc media player 0.9.4 |
||
videolan vlc media player 0.8.5 |
||
videolan vlc media player 0.9.9a |
||
videolan vlc media player 0.6.2 |
||
videolan vlc media player 0.8.6h |
||
videolan vlc media player 0.9.10 |
||
videolan vlc media player 0.8.4 |
||
videolan vlc media player 0.8.6 |
||
videolan vlc media player 0.8.6c |
||
videolan vlc media player 0.8.6i |
||
videolan vlc media player 0.5.2 |
||
videolan vlc media player 0.7.0 |
||
videolan vlc media player 0.9.1 |
||
videolan vlc media player 0.9.8a |
||
videolan vlc media player 1.0.1 |
||
videolan vlc media player 0.5.3 |
||
videolan vlc media player 0.8.6a |
||
videolan vlc media player |
||
videolan vlc media player 1.0.0 |
||
videolan vlc media player 0.9.5 |
||
videolan vlc media player 0.6.0 |
||
videolan vlc media player 1.0.4 |
||
videolan vlc media player 0.8.6f |
||
videolan vlc media player 0.5.1 |
||
videolan vlc media player 1.0.2 |
||
videolan vlc media player 0.9.2 |
||
videolan vlc media player 0.6.1 |
||
videolan vlc media player 0.8.1 |
||
videolan vlc media player 0.9.9 |
||
videolan vlc media player 0.8.6e |
||
videolan vlc media player 0.8.6d |
||
videolan vlc media player 0.7.1 |
||
videolan vlc media player 0.8.2 |
||
videolan vlc media player 0.9.3 |
||
videolan vlc media player 0.9.6 |
Vulmon