Downloaded and installed v2.1.2 today, but it fails to update the Firefox plugin which remains at v2.1.0 according to the Firefox Add-ons Manager.
This means that the VLC player remains vuilnerable to the RTSP exploit described in the following link when used in combination with the latest version of Firefox: http://isecpartners.github.io/fuzzing/v ... ility.html
VLC v2.1.2 vulnerable to RTSP attack
-
Jean-Baptiste Kempf
- Site Administrator
- Posts: 37523
- Joined: 22 Jul 2005 15:29
- VLC version: 4.0.0-git
- Operating System: Linux, Windows, Mac
- Location: Cone, France
- Contact:
Re: VLC v2.1.2 vulnerable to RTSP attack
If you installed the firefox plugin with 2.1.2, then it is fixed. Even if the number is 2.1.0 in the firefox plugin.
Jean-Baptiste Kempf
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.
Return to “General VLC media player Troubleshooting”
Who is online
Users browsing this forum: No registered users and 45 guests