=====================================
www.videolan.org/security/sa1901.php
=====================================
@@ -0,0 +1,54 @@
+
+
+
+
+
+
Security Advisory 1901
+
+Summary : Read buffer overflow & use-after-free
+Date : June 2019
+Affected versions : VLC media player 3.0.6 and earlier
+ID : VideoLAN-SA-1901
+CVE reference : CVE-2019-5439, CVE-2019-12874
+
+
+
Details
+
A remote user can create some specially crafted avi or mkv files that, when loaded by the target user, will trigger a
+heap buffer overflow (read) in ReadFrame (demux/avi/avi.c), or a
+heap use after free in zlib_decompress_extra() (demux/mkv/utils.cpp) respectively
+
+
Impact
+
If successful, a malicious third party could trigger either a crash of VLC or an arbitratry code execution with the privileges of the target user.
+
+
Threat mitigation
+
Exploitation of those issues requires the user to explicitly open a specially crafted file or stream.
+
ASLR and DEP help reduce exposure, but may be bypassed.
+
+
Workarounds
+
The user should refrain from opening files from untrusted third parties
+or accessing untrusted remote sites (or disable the VLC browser plugins),
+until the patch is applied.
+
+
+
Solution
+
VLC media player 3.0.7 addresses the issue.
+
+
References
+
+- The VideoLAN project
+- http://www.videolan.org/
+
+- VLC official GIT repository
+- http://git.videolan.org/?p=vlc.git
+
+
+
+
Security Advisory 1901
-Summary : Read buffer overflow & use-after-free
+Summary : Read buffer overflow & double free
Date : June 2019
Affected versions : VLC media player 3.0.6 and earlier
ID : VideoLAN-SA-1901
@@ -21,7 +21,7 @@ CVE reference : CVE-2019-5439, CVE-2019-12874
Details
A remote user can create some specially crafted avi or mkv files that, when loaded by the target user, will trigger a
heap buffer overflow (read) in ReadFrame (demux/avi/avi.c), or a
-heap use after free in zlib_decompress_extra() (demux/mkv/utils.cpp) respectively
+double free in zlib_decompress_extra() (demux/mkv/utils.cpp) respectively
Impact
If successful, a malicious third party could trigger either a crash of VLC or an arbitratry code execution with the privileges of the target user.
@@ -39,6 +39,10 @@ until the patch is applied.
Solution
VLC media player 3.0.7 addresses the issue.
+
+Credits
+The MKV double free vulnerability was reported by Symeon Paraschoudis from Pen Test Partners
+
References
- The VideoLAN project
View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/commit/433cd91fe5e964e8626dcba12d5ad5e4a6e8d408
--
View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/commit/433cd91fe5e964e8626dcba12d5ad5e4a6e8d408
You're receiving this email because of your account on code.videolan.org.
From gitlab at videolan.org Mon Jun 24 12:18:44 2019
From: gitlab at videolan.org (=?UTF-8?B?SHVnbyBCZWF1esOpZS1MdXlzc2Vu?=)
Date: Mon, 24 Jun 2019 12:18:44 +0200
Subject: [www-doc] [Git][VideoLAN.org/websites][master] Update SA1901
Message-ID: <5d10a38488cfc_29c3fcd3f5a070c2082f1@gitlab.mail>
Hugo Beauzée-Luyssen pushed to branch master at VideoLAN organization / websites
Commits:
db2a5f5d by Hugo Beauzée-Luyssen at 2019-06-24T10:18:27Z
Update SA1901
- - - - -
1 changed file:
- www.videolan.org/security/sa1901.php
Changes:
=====================================
www.videolan.org/security/sa1901.php
=====================================
@@ -28,7 +28,6 @@ double free in zlib_decompress_extra() (demux/mkv/utils.cpp) respectively
Threat mitigation
Exploitation of those issues requires the user to explicitly open a specially crafted file or stream.
-ASLR and DEP help reduce exposure, but may be bypassed.
Workarounds
The user should refrain from opening files from untrusted third parties
@@ -37,7 +36,8 @@ until the patch is applied.
Solution
-VLC media player 3.0.7 addresses the issue.
+
VLC media player 3.0.7 addresses the issues.
+This release also fixes an important security issue that could lead to code execution when playing an AAC file.
Credits
View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/commit/db2a5f5db362e511be9dca5fbeab536407c4f1c6
--
View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/commit/db2a5f5db362e511be9dca5fbeab536407c4f1c6
You're receiving this email because of your account on code.videolan.org.
+ 
+ 
+ 
+ 
+ 
+ 
+
+
+ Version 3.0
+
+
+
+ 
