vulnerability

Alpine Linux: CVE-2016-5108: vlc crash and potential code execution when processing QuickTime IMA files

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:N/AC:L/Au:N/C:P/I:P/A:P)	2016-06-08	2017-08-30	2017-10-30

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

2016-06-08

Added

2017-08-30

Modified

2017-10-30

Description

Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.

Solution

alpine-linux-upgrade-vlc

References

ALPINE-5715
ALPINE-5716
ALPINE-5717
ALPINE-5718
BID-90924
CVE-2016-5108
https://attackerkb.com/topics/CVE-2016-5108
DEBIAN-DSA-3598

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today