CVE-2011-0522

2011-02-0721:00:00

CWE-119

[email protected]

web.nvd.nist.gov

vlc media player

vulnerability

remote code execution

cve-2011-0522

subtitle

mkv file

heap memory corruption

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.828 High

EPSS

Percentile

98.4%

JSON

The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening “<” without a closing “>” in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv.

CPENameOperatorVersion
videolan:vlc_media_playervideolan vlc media playereq1.1.3
videolan:vlc_media_playervideolan vlc media playereq1.1.4
videolan:vlc_media_playervideolan vlc media playereq1.1.5
videolan:vlc_media_playervideolan vlc media playereq1.1.2
videolan:vlc_media_playervideolan vlc media playereq1.1.0
videolan:vlc_media_playervideolan vlc media playereq1.1.6
videolan:vlc_media_playervideolan vlc media playereq1.1.1

CPE	Name	Operator	Version
videolan:vlc_media_player	videolan vlc media player	eq	1.1.3
videolan:vlc_media_player	videolan vlc media player	eq	1.1.4
videolan:vlc_media_player	videolan vlc media player	eq	1.1.5
videolan:vlc_media_player	videolan vlc media player	eq	1.1.2
videolan:vlc_media_player	videolan vlc media player	eq	1.1.0
videolan:vlc_media_player	videolan vlc media player	eq	1.1.6
videolan:vlc_media_player	videolan vlc media player	eq	1.1.1