Lucene search

[email protected]CVE-2011-3623

HistoryDec 26, 2014 - 8:59 p.m.

CVE-2011-3623

2014-12-2620:59:08

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-3623

videolan

vlc media player

buffer overflow

remote code execution

asf file

avi file

mp4 file

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.103 Low

EPSS

Percentile

95.0%

JSON

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level function in modules/demux/avi/libavi.c; or (3) a crafted MP4 file, related to the __MP4_BoxDumpStructure function in modules/demux/mp4/libmp4.c.

Affected configurations

NVD

Node

videolanvlc_media_playerRange≤1.0.1

videolanvlc_media_playerMatch0.5.0

videolanvlc_media_playerMatch0.5.1

videolanvlc_media_playerMatch0.5.2

videolanvlc_media_playerMatch0.5.3

videolanvlc_media_playerMatch0.6.0

videolanvlc_media_playerMatch0.6.1

videolanvlc_media_playerMatch0.6.2

videolanvlc_media_playerMatch0.7.0

videolanvlc_media_playerMatch0.7.1

videolanvlc_media_playerMatch0.7.2

videolanvlc_media_playerMatch0.8.0

videolanvlc_media_playerMatch0.8.1

videolanvlc_media_playerMatch0.8.2

videolanvlc_media_playerMatch0.8.4

videolanvlc_media_playerMatch0.8.4a

videolanvlc_media_playerMatch0.8.5

videolanvlc_media_playerMatch0.8.6

videolanvlc_media_playerMatch0.8.6a

videolanvlc_media_playerMatch0.8.6b

videolanvlc_media_playerMatch0.8.6c

videolanvlc_media_playerMatch0.8.6d

videolanvlc_media_playerMatch0.8.6e

videolanvlc_media_playerMatch0.8.6f

videolanvlc_media_playerMatch0.8.6g

videolanvlc_media_playerMatch0.8.6h

videolanvlc_media_playerMatch0.8.6i

videolanvlc_media_playerMatch0.8.1337

videolanvlc_media_playerMatch0.9.0

videolanvlc_media_playerMatch0.9.1

videolanvlc_media_playerMatch0.9.2

videolanvlc_media_playerMatch0.9.3

videolanvlc_media_playerMatch0.9.4

videolanvlc_media_playerMatch0.9.5

videolanvlc_media_playerMatch0.9.6

videolanvlc_media_playerMatch0.9.8a

videolanvlc_media_playerMatch0.9.9

videolanvlc_media_playerMatch0.9.9a

videolanvlc_media_playerMatch0.9.10

videolanvlc_media_playerMatch1.0.0

CPENameOperatorVersion
videolan:vlc_media_playervideolan vlc media playerle1.0.1
videolan:vlc_media_playervideolan vlc media playereq0.5.0
videolan:vlc_media_playervideolan vlc media playereq0.5.1
videolan:vlc_media_playervideolan vlc media playereq0.5.2
videolan:vlc_media_playervideolan vlc media playereq0.5.3
videolan:vlc_media_playervideolan vlc media playereq0.6.0
videolan:vlc_media_playervideolan vlc media playereq0.6.1
videolan:vlc_media_playervideolan vlc media playereq0.6.2
videolan:vlc_media_playervideolan vlc media playereq0.7.0
videolan:vlc_media_playervideolan vlc media playereq0.7.1

CPE	Name	Operator	Version
videolan:vlc_media_player	videolan vlc media player	le	1.0.1
videolan:vlc_media_player	videolan vlc media player	eq	0.5.0
videolan:vlc_media_player	videolan vlc media player	eq	0.5.1
videolan:vlc_media_player	videolan vlc media player	eq	0.5.2
videolan:vlc_media_player	videolan vlc media player	eq	0.5.3
videolan:vlc_media_player	videolan vlc media player	eq	0.6.0
videolan:vlc_media_player	videolan vlc media player	eq	0.6.1
videolan:vlc_media_player	videolan vlc media player	eq	0.6.2
videolan:vlc_media_player	videolan vlc media player	eq	0.7.0
videolan:vlc_media_player	videolan vlc media player	eq	0.7.1