Lucene search

[email protected]CVE-2011-1684

HistoryMay 03, 2011 - 8:55 p.m.

CVE-2011-1684

2011-05-0320:55:11

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-1684

vlc media player

buffer overflow

remote code execution

denial of service

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.091 Low

EPSS

Percentile

94.6%

JSON

Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.

Affected configurations

NVD

Node

videolanvlc_media_playerMatch1.0.0

videolanvlc_media_playerMatch1.0.1

videolanvlc_media_playerMatch1.0.2

videolanvlc_media_playerMatch1.0.3

videolanvlc_media_playerMatch1.0.4

videolanvlc_media_playerMatch1.0.5

videolanvlc_media_playerMatch1.0.6

videolanvlc_media_playerMatch1.1.0

videolanvlc_media_playerMatch1.1.1

videolanvlc_media_playerMatch1.1.2

videolanvlc_media_playerMatch1.1.3

videolanvlc_media_playerMatch1.1.4

videolanvlc_media_playerMatch1.1.5

videolanvlc_media_playerMatch1.1.6

videolanvlc_media_playerMatch1.1.6.1

videolanvlc_media_playerMatch1.1.7

videolanvlc_media_playerMatch1.1.8

CPENameOperatorVersion
videolan:vlc_media_playervideolan vlc media playereq1.0.0
videolan:vlc_media_playervideolan vlc media playereq1.0.1
videolan:vlc_media_playervideolan vlc media playereq1.0.2
videolan:vlc_media_playervideolan vlc media playereq1.0.3
videolan:vlc_media_playervideolan vlc media playereq1.0.4
videolan:vlc_media_playervideolan vlc media playereq1.0.5
videolan:vlc_media_playervideolan vlc media playereq1.0.6
videolan:vlc_media_playervideolan vlc media playereq1.1.0
videolan:vlc_media_playervideolan vlc media playereq1.1.1
videolan:vlc_media_playervideolan vlc media playereq1.1.2

CPE	Name	Operator	Version
videolan:vlc_media_player	videolan vlc media player	eq	1.0.0
videolan:vlc_media_player	videolan vlc media player	eq	1.0.1
videolan:vlc_media_player	videolan vlc media player	eq	1.0.2
videolan:vlc_media_player	videolan vlc media player	eq	1.0.3
videolan:vlc_media_player	videolan vlc media player	eq	1.0.4
videolan:vlc_media_player	videolan vlc media player	eq	1.0.5
videolan:vlc_media_player	videolan vlc media player	eq	1.0.6
videolan:vlc_media_player	videolan vlc media player	eq	1.1.0
videolan:vlc_media_player	videolan vlc media player	eq	1.1.1
videolan:vlc_media_player	videolan vlc media player	eq	1.1.2