Lucene search

[email protected]CVE-2011-2587

HistoryJul 27, 2011 - 2:55 a.m.

CVE-2011-2587

2011-07-2702:55:02

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-2587

realmedia

buffer overflow

vlc media player

denial of service

arbitrary code

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%

JSON

Heap-based buffer overflow in the DemuxAudioSipr function in real.c in the RealMedia demuxer in VideoLAN VLC media player 1.1.x before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real Media file.

Affected configurations

NVD

Node

videolanvlc_media_playerMatch1.1.0

videolanvlc_media_playerMatch1.1.1

videolanvlc_media_playerMatch1.1.2

videolanvlc_media_playerMatch1.1.3

videolanvlc_media_playerMatch1.1.4

videolanvlc_media_playerMatch1.1.4.1

videolanvlc_media_playerMatch1.1.5

videolanvlc_media_playerMatch1.1.6

videolanvlc_media_playerMatch1.1.6.1

videolanvlc_media_playerMatch1.1.7

videolanvlc_media_playerMatch1.1.8

videolanvlc_media_playerMatch1.1.9

videolanvlc_media_playerMatch1.1.10

videolanvlc_media_playerMatch1.1.10.1

CPENameOperatorVersion
videolan:vlc_media_playervideolan vlc media playereq1.1.0
videolan:vlc_media_playervideolan vlc media playereq1.1.1
videolan:vlc_media_playervideolan vlc media playereq1.1.2
videolan:vlc_media_playervideolan vlc media playereq1.1.3
videolan:vlc_media_playervideolan vlc media playereq1.1.4
videolan:vlc_media_playervideolan vlc media playereq1.1.4.1
videolan:vlc_media_playervideolan vlc media playereq1.1.5
videolan:vlc_media_playervideolan vlc media playereq1.1.6
videolan:vlc_media_playervideolan vlc media playereq1.1.6.1
videolan:vlc_media_playervideolan vlc media playereq1.1.7

CPE	Name	Operator	Version
videolan:vlc_media_player	videolan vlc media player	eq	1.1.0
videolan:vlc_media_player	videolan vlc media player	eq	1.1.1
videolan:vlc_media_player	videolan vlc media player	eq	1.1.2
videolan:vlc_media_player	videolan vlc media player	eq	1.1.3
videolan:vlc_media_player	videolan vlc media player	eq	1.1.4
videolan:vlc_media_player	videolan vlc media player	eq	1.1.4.1
videolan:vlc_media_player	videolan vlc media player	eq	1.1.5
videolan:vlc_media_player	videolan vlc media player	eq	1.1.6
videolan:vlc_media_player	videolan vlc media player	eq	1.1.6.1
videolan:vlc_media_player	videolan vlc media player	eq	1.1.7