Skip to main content

VLC Media Player 3.0.11 fixes severe remote code execution flaw

  • June 16, 2020
  • 2 replies
  • 26 views

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54

June 16,  2020 By Lawrence Abrams

 

VLC

VideoLan has released VLC Media Player 3.0.11, and it is now available for Windows, Mac, and Linux. In addition to bug fixes and improvements, this release also fixes a security vulnerability that could allow attackers to remotely execute commands or crash VLC on a vulnerable computer.

This vulnerability is tracked as CVE-2020-13428 and is a "buffer overflow in VLC's H26X packetizer" that would allow attackers to execute commands under the same security level as the user if properly exploited.

 

Full Article.

2 replies

TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • June 16, 2020

Awesome I just updated!

 

Thanks,


Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54

So have I Daniel.