VLC Player Vulnerable to Remote Hijack
Written by Ernesto on March 18, 2008VLC Player, one of the best and most widely used media players has found to be vulnerable to a remote hijack. The reported vulnerability makes it possible for a malicious user to run arbitrary code, potentially taking remote control of the host machine.
VLC is a popular media player among BitTorrent users. Not just for the fact that it is free, also because it includes a huge number of the video codecs, so it can play virtually every video file available.
Unfortunately, the latest versions of VLC have a security flaw according to a report from Luigi Auriemma. The vulnerability can be exploited to compromise a user’s system, as it leaves it wide open for a malicious user to run arbitrary code.
The problem occurs when a someone loads a subtitle file, which causes a buffer overflow that can be exploited. The security flaw is platform independent, which means it affects Windows, Mac and Linux users.
Initially it was reported that the flaws in version 0.8.6d were fixed in the latest release, but this turns out not to be the case. Auriemma writes: “The old buffer-overflow in the subtitles handled by VLC has not been fully patched in version 0.8.6e.”
“The funny thing is that my old proof-of-concept was built just to test this specific buffer-overflow and in fact it works on the new VLC version too without modifications,” he adds.
For now, the only solutions are not to run any subtitle files, or to grab one of the nightly builds. The downside is, however, that these might not be as stable as the regular releases.
Previously: Most Popular DVDrips on BitTorrent (wk11)
Next: CBC To Release TV-Show via BitTorrent, For Free
120 Responses (Add yours or TrackBack)
Pages: « 1 2 3 [4] 5 » Show All
I prefer vlc over mplayer, mplayer is crap compared to vlc.
[quote comment="314658"][quote comment="314643"][quote comment="314602"][quote comment="314593"][quote comment="314509"][quote comment="314400"][quote comment="314330"][quote comment="314325"][quote comment="314226"][quote comment="314197"][quote comment="314057"][quote comment="314040"]Luckily for me I speak every language in the world, including dead ones, and therefore don’t need subtitles.[/quote]
البريّة في العالم، وتقطن الببور الغابات أو الأراضي العشبيّة حيث يساعدها فراؤها المخطط على التموّه بشكلٍ كبير وبالتالي اصطياد فرائس تكون في العادة أكثر رشاقة وسرعةً منها. تحب الببور أن تنزل في الماء بشكلٍ مستمر في الأيام الحارّة، لكنها على عك
u feel me ?[/quote]
Single greatest post on torrent freak ever.[/quote]
Sure is great comment[/quote]
why,yes,….(blushing)thank q…[/quote]
I’ll just add my part![/quote]
black people[/quote]
white people[/quote]
Hemorrhoids?[/quote]
I think we broke it.[/quote]
Recursive Quotes FTW![/quote]
i like pie[/quote]
its fun to quote
“99% of people just want to be able to get a video file, and watch it.”
That’s why MPlayer is the best choice. Not only does it play everything under sun, it has proper soft-sub rendering in contrast to VLC. Further MPlayer does not annoy me with a useless, bloated, slow GUI. It is simply perfect in so far that you don’t have to do shit to play files but it’s powerful so that you can do a hell lot of things IF YOU WANT TO. It’s perfect for power users as well for n00bs - brain-less monkeys excluded. For you wankers who have no hands free for typing and are generally to retarted to understand how to navigate quickly in a shell, there are GUI front-ends, too, of course.
Thanks to the bests out of there,
http://www.mplayerhq.hu
http://www.videolan.org/
all with big thanks to ffmpeg project they both using (but not only) to do great job!
http://ffmpeg.mplayerhq.hu/
Many, many, thanks !!!
Just about every media player has had its share of security problems, anything which reaches out into the internet is going to have a problem eventually, if it is a program it can be exploited, eventually, somehow, someway.
[Oh yeah? What about...] No one cares, shut up, and fuck you.
Quit polishing your e-penis over which media player you think is better, we all have our opinion, we don’t need to hear endless barking by a bunch of pasty geeks and wannabe geeks who are just taking a break from masturbating to another dirty crack whore’s beefy pussy or part time plumber’s happy hairy anus.
Just about every media player has had its share of security problems, anything which reaches out into the internet is going to have a problem eventually, if it is a program it can be exploited, eventually, somehow, someway.
[Oh yeah? What about...] No one cares, shut up, and fuck you.
Quit polishing your e-penis over which media player you think is better, we all have our opinion, we don’t need to hear endless barking by a bunch of pasty geeks and wannabe geeks who are just taking a break from masturbating to another dirty crack whore’s beefy pussy or part time plumber’s happy hairy anus!
Open source allows us the freedom to freely choose and use multiple media players. We are not confined to the Windows mentality, nor should we act like the Windows users and their feeble sheep minds.
Install any media player you want in Linux, enjoy what you want, they are free and open source. Quit your bitching over projects you probably have no investment in, financial or otherwise, and thank your lucky stars you have the freedom to choose and use these programs.
Why the HELL did you have to post it here? Why didn’t you inform the devs instead!? You’re an idiot…
As long as their is more than one choice for anything then everyone will have a favourite and perceived best choice. I use vlc. You may use something else. It’s called “choice” and it’s not wrong.
I think I’d rather discuss world peace rather than a flame war about which media viewer is “best”.
Nay, it’s called “choice” because there are good choices and bad choices. World peace is overrated! Capitalism needs war just as humans need blood.
#74
Are you guys on crack?
You must have a lot time to waste.
[quote comment="314731"]“99% of people just want to be able to get a video file, and watch it.”
That’s why MPlayer is the best choice. Not only does it play everything under sun, it has proper soft-sub rendering in contrast to VLC. Further MPlayer does not annoy me with a useless, bloated, slow GUI. It is simply perfect in so far that you don’t have to do shit to play files but it’s powerful so that you can do a hell lot of things IF YOU WANT TO. It’s perfect for power users as well for n00bs - brain-less monkeys excluded. For you wankers who have no hands free for typing and are generally to retarted to understand how to navigate quickly in a shell, there are GUI front-ends, too, of course.[/quote]
yes it is
[quote comment="314698"][quote comment="314658"][quote comment="314643"][quote comment="314602"][quote comment="314593"][quote comment="314509"][quote comment="314400"][quote comment="314330"][quote comment="314325"][quote comment="314226"][quote comment="314197"][quote comment="314057"][quote comment="314040"]Luckily for me I speak every language in the world, including dead ones, and therefore don’t need subtitles.[/quote]
البريّة في العالم، وتقطن الببور الغابات أو الأراضي العشبيّة حيث يساعدها فراؤها المخطط على التموّه بشكلٍ كبير وبالتالي اصطياد فرائس تكون في العادة أكثر رشاقة وسرعةً منها. تحب الببور أن تنزل في الماء بشكلٍ مستمر في الأيام الحارّة، لكنها على عك
u feel me ?[/quote]
Single greatest post on torrent freak ever.[/quote]
Sure is great comment[/quote]
why,yes,….(blushing)thank q…[/quote]
I’ll just add my part![/quote]
black people[/quote]
white people[/quote]
Hemorrhoids?[/quote]
I think we broke it.[/quote]
Recursive Quotes FTW![/quote]
i like pie[/quote]
its fun to quote[/quote]
lol
veni vidi vici! ;)
[quote comment="314862"][quote comment="314698"][quote comment="314658"][quote comment="314643"][quote comment="314602"][quote comment="314593"][quote comment="314509"][quote comment="314400"][quote comment="314330"][quote comment="314325"][quote comment="314226"][quote comment="314197"][quote comment="314057"][quote comment="314040"]Luckily for me I speak every language in the world, including dead ones, and therefore don’t need subtitles.[/quote]
البريّة في العالم، وتقطن الببور الغابات أو الأراضي العشبيّة حيث يساعدها فراؤها المخطط على التموّه بشكلٍ كبير وبالتالي اصطياد فرائس تكون في العادة أكثر رشاقة وسرعةً منها. تحب الببور أن تنزل في الماء بشكلٍ مستمر في الأيام الحارّة، لكنها على عك
u feel me ?[/quote]
Single greatest post on torrent freak ever.[/quote]
Sure is great comment[/quote]
why,yes,….(blushing)thank q…[/quote]
I’ll just add my part![/quote]
black people[/quote]
white people[/quote]
Hemorrhoids?[/quote]
I think we broke it.[/quote]
Recursive Quotes FTW![/quote]
i like pie[/quote]
its fun to quote[/quote]
lol[/quote]
Assholes! Now you can’t even see the beginning!
[quote comment="314889"][quote comment="314862"][quote comment="314698"][quote comment="314658"][quote comment="314643"][quote comment="314602"][quote comment="314593"][quote comment="314509"][quote comment="314400"][quote comment="314330"][quote comment="314325"][quote comment="314226"][quote comment="314197"][quote comment="314057"][quote comment="314040"]Luckily for me I speak every language in the world, including dead ones, and therefore don’t need subtitles.[/quote]
البريّة في العالم، وتقطن الببور الغابات أو الأراضي العشبيّة حيث يساعدها فراؤها المخطط على التموّه بشكلٍ كبير وبالتالي اصطياد فرائس تكون في العادة أكثر رشاقة وسرعةً منها. تحب الببور أن تنزل في الماء بشكلٍ مستمر في الأيام الحارّة، لكنها على عك
u feel me ?[/quote]
Single greatest post on torrent freak ever.[/quote]
Sure is great comment[/quote]
why,yes,….(blushing)thank q…[/quote]
I’ll just add my part![/quote]
black people[/quote]
white people[/quote]
Hemorrhoids?[/quote]
I think we broke it.[/quote]
Recursive Quotes FTW![/quote]
i like pie[/quote]
its fun to quote[/quote]
lol[/quote]
Assholes! Now you can’t even see the beginning![/quote]
it all refers to post 13,fyi. and quoting ppl sure is fun…..
[quote comment="314918"][quote comment="314889"][quote comment="314862"][quote comment="314698"][quote comment="314658"][quote comment="314643"][quote comment="314602"][quote comment="314593"][quote comment="314509"][quote comment="314400"][quote comment="314330"][quote comment="314325"][quote comment="314226"][quote comment="314197"][quote comment="314057"][quote comment="314040"]Luckily for me I speak every language in the world, including dead ones, and therefore don’t need subtitles.[/quote]
البريّة في العالم، وتقطن الببور الغابات أو الأراضي العشبيّة حيث يساعدها فراؤها المخطط على التموّه بشكلٍ كبير وبالتالي اصطياد فرائس تكون في العادة أكثر رشاقة وسرعةً منها. تحب الببور أن تنزل في الماء بشكلٍ مستمر في الأيام الحارّة، لكنها على عك
u feel me ?[/quote]
Single greatest post on torrent freak ever.[/quote]
Sure is great comment[/quote]
why,yes,….(blushing)thank q…[/quote]
I’ll just add my part![/quote]
black people[/quote]
white people[/quote]
Hemorrhoids?[/quote]
I think we broke it.[/quote]
Recursive Quotes FTW![/quote]
i like pie[/quote]
its fun to quote[/quote]
lol[/quote]
Assholes! Now you can’t even see the beginning![/quote]
it all refers to post 13,fyi. and quoting ppl sure is fun…..[/quote]
haha Babel is stupid…
[quote comment="314981"][quote comment="314918"][quote comment="314889"][quote comment="314862"][quote comment="314698"][quote comment="314658"][quote comment="314643"][quote comment="314602"][quote comment="314593"][quote comment="314509"][quote comment="314400"][quote comment="314330"][quote comment="314325"][quote comment="314226"][quote comment="314197"][quote comment="314057"][quote comment="314040"]Luckily for me I speak every language in the world, including dead ones, and therefore don’t need subtitles.[/quote]
البريّة في العالم، وتقطن الببور الغابات أو الأراضي العشبيّة حيث يساعدها فراؤها المخطط على التموّه بشكلٍ كبير وبالتالي اصطياد فرائس تكون في العادة أكثر رشاقة وسرعةً منها. تحب الببور أن تنزل في الماء بشكلٍ مستمر في الأيام الحارّة، لكنها على عك
u feel me ?[/quote]
Single greatest post on torrent freak ever.[/quote]
Sure is great comment[/quote]
why,yes,….(blushing)thank q…[/quote]
I’ll just add my part![/quote]
black people[/quote]
white people[/quote]
Hemorrhoids?[/quote]
I think we broke it.[/quote]
Recursive Quotes FTW![/quote]
i like pie[/quote]
its fun to quote[/quote]
lol[/quote]
Assholes! Now you can’t even see the beginning![/quote]
it all refers to post 13,fyi. and quoting ppl sure is fun…..[/quote]
haha Babel is stupid…[/quote]
what was this about again? :f
[quote comment="314991"][quote comment="314981"][quote comment="314918"][quote comment="314889"][quote comment="314862"][quote comment="314698"][quote comment="314658"][quote comment="314643"][quote comment="314602"][quote comment="314593"][quote comment="314509"][quote comment="314400"][quote comment="314330"][quote comment="314325"][quote comment="314226"][quote comment="314197"][quote comment="314057"][quote comment="314040"]Luckily for me I speak every language in the world, including dead ones, and therefore don’t need subtitles.[/quote]
البريّة في العالم، وتقطن الببور الغابات أو الأراضي العشبيّة حيث يساعدها فراؤها المخطط على التموّه بشكلٍ كبير وبالتالي اصطياد فرائس تكون في العادة أكثر رشاقة وسرعةً منها. تحب الببور أن تنزل في الماء بشكلٍ مستمر في الأيام الحارّة، لكنها على عك
u feel me ?[/quote]
Single greatest post on torrent freak ever.[/quote]
Sure is great comment[/quote]
why,yes,….(blushing)thank q…[/quote]
I’ll just add my part![/quote]
black people[/quote]
white people[/quote]
Hemorrhoids?[/quote]
I think we broke it.[/quote]
Recursive Quotes FTW![/quote]
i like pie[/quote]
its fun to quote[/quote]
lol[/quote]
Assholes! Now you can’t even see the beginning![/quote]
it all refers to post 13,fyi. and quoting ppl sure is fun…..[/quote]
haha Babel is stupid…[/quote]
what was this about again? :f[/quote]
About some godly folk who claims to speak all languages.
[quote comment="314731"]“99% of people just want to be able to get a video file, and watch it.”
That’s why MPlayer is the best choice. Not only does it play everything under sun, it has proper soft-sub rendering in contrast to VLC. Further MPlayer does not annoy me with a useless, bloated, slow GUI. It is simply perfect in so far that you don’t have to do shit to play files but it’s powerful so that you can do a hell lot of things IF YOU WANT TO. It’s perfect for power users as well for n00bs - brain-less monkeys excluded. For you wankers who have no hands free for typing and are generally to retarted to understand how to navigate quickly in a shell, there are GUI front-ends, too, of course.[/quote]
Yes anything but linux (without a gui of course) sucks and are for brainless monkeys. Heck even linux is for brainless monkeys. We should all use 1010101010111s to do tasks, not use some fancy gui with text and commands or stuff. I bet you typed that comment with a keyboard using letters. Noob. Lawl.
has anyone given any thought to simply yanking the computer offline for a bit to enjoy a movie with subtitles???
i dont get it…
oh and this idiotic slamming of vlc… vlc is one of if not the most simple and stable player out there… go back to playing your online game and eating by yourself…. and all the other things that you do by yourself… idiots
So I decided to build mplayer from source the other day, and what do you know? I didn’t have to get a codec pack and I specified the gui option on the configure script. It plays everything. Only thing I had to get was the skin for the gui. (This is on windows by the way.)
The only reason I don’t like vlc, beyond the slow/buggy reasons, is that it butchers soft or embedded subs. If it had an option to use direct vobsub that would be great, but it doesn’t. Even mplayer can be forced to use ffdshow with a directshow avisynth script. VLC I don’t know…
[quote comment="314384"]Stop the VLC bashing. I have used it on my Macs since version 4. Was and is a great player. Not many crashes, plays everything except WMV10, playlists work just fine, fullscreen controls are better then QuickTime’s, works with the Apple remote (menu button = fullscreen) and is configurable to the n-th degree. Open Source and free, no file opening lags like QT-player so what’s not to like? I don’t care which codecs it uses, it works and video looks great (except for some WMV9 files). It’s become a cornerstone of my universe and the main reason I don’t use QT, DVD Player or FrontRow.[/quote]
Then I guess someone spent time to work the bugs out of the Mac version, because none of that applies to the Windows port.
Before version 8, VLC wouldn’t play videos at all on my system. Earlier versions just crashed or did nothing. Version 7 played the videos, but the audio sounds like someone scratching a needle across a record (If it’s still online, there was mention of this in the VLC forums).
Version 8 mostly works, however it has crashed/locked up on me on numerous occasions. At one point, I had both the fullscreen and widescreen versions of a movie as AVI files. I opened both in Media Player Classic so that I could compare them side by side. It worked great, even playing the full audio from both (which I had to mute in one as I could never get them perfectly synced so there was an echo effect). I tried that with VLC on the same system. Both copies went off into limbo, displaying one frame every 10 seconds or so and the audio just stuttered endlessly, “Jit-jit-jit-jit-jit-jit…”
I tried using it to play DVDs since it’s supposed to be able to defeat the region code. It didn’t. I used it on a proper region DVD and the picture looked like crap because it was interlaced. I went to the menu to try out the de-interlacing options. It crashed.
As for the full-screen controls, well they say a picture is worth a thousand words, so here’s a picture of VLC playing a cheap DVD with the full-screen controls activated;
http://img227.imageshack.us/my.php?image=vlc1cv8.jpg
Can you spot the part I didn’t like? Not to mention that if you click the close button, it doesn’t close the controls, it closes VLC!
By contrast, MPC (and most players) pop up a control bar across the bottom of the screen when you move the mouse to the bottom of the screen.
Pages: « 1 2 3 [4] 5 » Show All
Add your response