The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in (1) an Ogg/Vorbis file, (2) an Ogg/Theora file, (3) a CDDB entry for a CD Digital Audio (CDDA) file, or (4) Service Announce Protocol (SAP) multicast packets.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade vlc | Jul 30, 2024 | Jun 21, 2007 |
| Freebsd | — | Upgrade vlc | Dec 10, 2025 | Jun 18, 2007 |
| Gentoo Linux | — | Upgrade media-video/vlc. | Oct 30, 2017 | Jun 21, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub