full-disclosure - 0day Vulnerability in VLC (this is my first release of the vuln anywhere)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 22 Apr 2013 07:31:07 -0400
From: jay van <jay4sdata@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: 0day Vulnerability in VLC (this is my first
	release of the vuln anywhere)

if VLC media player is launched in QT mode and the user is on windows NT
(any version of windows so far as tested) connected to the internet there
is a vulnerability in the handling of unicast packets. The Proof of concept
code is in development and should be ready for publishing within the next 2
weeks. More in depth vulnerability information will be released with the
proof of concept. This is a joint effort (the POC (proof of concept) code
and vuln discovery) by 2 security firms. 4sData IT solutions and another
firm that would like to remain nameless for the time being. This
vulnerability exposes almost everyone using VLC media player (unless on
linux systems and thats just because of the lack of testing so far may
still be found to be exposed.). Thank you for your time and if interested
please respond and let me know,.

                 - Jay @ 4sData-IT-Solutions (www.4sdata.com - coming soon)

  P.S. Launching 4sData this week to coincide with the VLC vuln.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/