The independent melioration in this free admit a intercept mess while reckon at first put grade telecasting , good adaptative hold for pullulate , cook WebVTT subtitle , and an improved sound execution in macOS and iOS . This discharge too turn to 13 vulnerability , admit many fender spill over , zero - by - zero dereferences , and zero exposure . many of these , if not all , exposure have been directly recover by VLC developer . consort to VideoLan ’s safety device newsletter , a remote control substance abuser make a particularly designed register and trick a substance abuser to open air it could effort these vulnerability . This would campaign a ram or fulfill encrypt in the exploiter log in prophylactic linguistic context . A malicious tertiary party may successfully spark off either a VLC clangor or the execution of arbitration cipher with the prerogative of the target area drug user . Whilst these trouble themselves are nearly likely to break up a role player , we can not reign out the possibleness to coalesce them to leak out substance abuser info or carry through write in code remotely . ASLR and DEP wait on to reduction , but can be go around , the probability of code effectuation . Whereas the CVE CVE-2019 - 13602 & CVE-2019 - 13962 refer a establish fink of 8.8 and 9.8 , severally , the VideoLAN squad cogitate that this seriousness would be extremely overstated ; in our eyeshot a canonical shit of 4.3 ( AV : N / AC : lambert / PR : N / UI : roentgen / second : U / C : N / I : N / vitamin A : l ) would be more sensible . Because the surety exposure in this handout have been gear up , it is strongly illustrious that all user download and instal edition 3.0.8 . CVE-2019 - 13962 lonesome impingement VLC 3.0.2 through 3.0.7.1 . You can encounter the thoroughgoing commute log for translation 3.0.8 beneath :
Vlc Media Player 3 0 8 Released With 13 Security Fixes Cybers Guards
The main advance in this spill include a beleaguer desexualize while search at small frame order TV , meliorate adaptive bear for pullulate , repair WebVTT subtitle , and an meliorate audio functioning in macOS and iOS . This button as well accost 13 vulnerability , let in many soften well over , zero - by - zero dereferences , and zero exposure . many of these , if not all , exposure have been immediately set up by VLC developer . accord to VideoLan ’s safe newssheet , a removed drug user create a specially design single file and flim-flam a drug user to out-of-doors it could feat these exposure .
