CVE-2007-0256: videolan vlc_media_player

EPSS trend

Probability

11.96%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

+0.09 pp

From 11.88% on 20-09-2026

20-09-202620-10-2026

EPSS score

11.96%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoswindowsVerified
VideoLAN VLC Media Player 0.8.6a - Denial of Service (1)
Maturity: poc
exploit-databasedoswindowsVerified
VideoLAN VLC Media Player 0.8.6a - Denial of Service (2)
Maturity: poc

References

7 links

www.securityfocus.com/bid/22003VDB EntryX Refsource BIDExploit
osvdb.org/39022VDB EntryX Refsource OSVDB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14698VDB EntrySignatureX Refsource OVAL
downloads.securityfocus.com/vulnerabilities/exploits/22003.pyX Refsource MISC
wiki.videolan.org/Changelog/0.8.6bX Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/31515VDB EntryX Refsource XF
security-tracker.debian.org/tracker/CVE-2007-0256Advisory

Related vulnerabilities

CVE-2018-11516debianvlc+13.68%8y ago28-05-2018 16:00The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.CVE-2013-1954debianvlc+16.07%13y ago10-07-2013 19:00The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.CVE-2013-1868debianvlc+110.98%13y ago10-07-2013 19:00Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.CVE-2013-4388debianvlc+83.78%13y ago11-10-2013 22:00Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.CVE-2013-7340debianvlc+11.64%12y ago20-03-2014 19:00VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.CVE-2013-6934live555streaming_media+128.17%12y ago23-01-2014 21:00The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.

All vulnerabilities invlc_media_player

CVE-2007-0256: videolan vlc_media_player

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References