Lucene search

K
cve[email protected]CVE-2011-2194
HistoryJun 24, 2011 - 8:55 p.m.

CVE-2011-2194

2011-06-2420:55:00
CWE-189
web.nvd.nist.gov
28
cve-2011-2194
xspf playlist parser
videolan
vlc media player
integer overflow
denial of service
heap-based buffer overflow
nvd

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.166 Low

EPSS

Percentile

96.0%

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.166 Low

EPSS

Percentile

96.0%