CVE-2014-9629
Fixed in a distro release EPSS 2%
Integer overflow in the Encode function in modules/codec/schroedinger.c in VideoLAN VLC media player before 2.1.6 and 2.2.x before 2.2.1 allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted length value.
Products: videolan vlc_media_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | vlc | 2.2.0~rc2-2 |
| Debian 13 | vlc | 2.2.0~rc2-2 |
| Debian 14 | vlc | 2.2.0~rc2-2 |
| Debian 7 | vlc | 2.0.3-5+deb7u2 |
| Ubuntu 14.04 LTS | vlc | 2.1.6-0ubuntu14.04.1 |