CVE-2016-5108
Fixed in a distro release EPSS 25%
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
Products: debian_linux, videolan vlc_media_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | vlc | 2.2.3-2 |
| Debian 13 | vlc | 2.2.3-2 |
| Debian 14 | vlc | 2.2.3-2 |
| Debian 8 | vlc | 2.2.4-1~deb8u1 |
| Ubuntu 14.04 LTS | vlc | 2.1.6-0ubuntu14.04.3 |
| Ubuntu 16.04 LTS | vlc | 2.2.2-5ubuntu0.16.04.3 |
| openSUSE Tumbleweed | vlc | 2.2.4-11.1 |