Kazumara ,

In general media files can be formed in a way to trigger some bug in the media player, sometimes in ways that allow to overflow buffers and start ROP chaining.

About 8 years ago there was this media file going around crashing any iPhones that tried to play it with the integrated player.

Of course crashing is way easier than code execution. So overall your scenario is unlikely. VLC also does not yet know of any issues with 3.0.20: https://www.videolan.org/security/

Coasting0942 ,

When was the last time VLC paid $50K USD for a proper security audit?

Sethayy ,

Probably never?

Next you're gonna be judging cars on their ability to float.

Open source follows an entirely different risk model (and arguably much more effective than throwing money at greedy companies)

Julian_1_2_3_4_5 ,

if you really only played it and it didn't abuse some zero day in vlc (extremely unlikely), the there's basically zero chance you could have activated a virus.

Julian_1_2_3_4_5 ,

But it's definitely possible to ship a virus embedded in a playable mkv file, but something else would have to extract it first, for it to do anything

TheKMAP ,

The 3DS got rooted by playing a music file. Anything can happen homie.

Coasting0942 ,

It’s possible to get a virus from any data that enters your computer full stop.

Likelyhood wise: that virus on the MKV will have to attack the operating system preview system (which means you fucked all the way up to personal nation state attention), or attack the video player (which is a lot more likelier, they discover theoretical exploits all the time).

You’re talking about streaming with VLC? Was it a trusted source? Cause otherwise the FBI or script kiddie has probably fucked you up.

ultratiem ,
@ultratiem@lemmy.ca avatar

Depends what you play it through TBH. If a program has access to your memory, then yes. Naturally it's a nuanced answer and unless you are a security expert that knows exactly how memory is allocated and how elevated privileges work, not to mention all the little bugs, etc. in your system, then the answer is yes. You aren't really safe from anything that hits your hard drive.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • kbinchat
  • All magazines