Lucene search
HistoryJul 12, 2012 - 9:55 p.m.
CVE-2012-3377
cve-2012-3377
nvd
videolan
vlc media player
buffer overflow
ogg
demuxer
denial of service
application crash
arbitrary code
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file.
Affected configurations
Node
videolanvlc_media_playerRange≤2.0.1
ORvideolanvlc_media_playerMatch0.1.99a
ORvideolanvlc_media_playerMatch0.1.99b
ORvideolanvlc_media_playerMatch0.1.99c
ORvideolanvlc_media_playerMatch0.1.99d
ORvideolanvlc_media_playerMatch0.1.99e
ORvideolanvlc_media_playerMatch0.1.99f
ORvideolanvlc_media_playerMatch0.1.99g
ORvideolanvlc_media_playerMatch0.1.99h
ORvideolanvlc_media_playerMatch0.1.99i
ORvideolanvlc_media_playerMatch0.2.0
ORvideolanvlc_media_playerMatch0.2.50
ORvideolanvlc_media_playerMatch0.2.60
ORvideolanvlc_media_playerMatch0.2.61
ORvideolanvlc_media_playerMatch0.2.62
ORvideolanvlc_media_playerMatch0.2.63
ORvideolanvlc_media_playerMatch0.2.70
ORvideolanvlc_media_playerMatch0.2.71
ORvideolanvlc_media_playerMatch0.2.72
ORvideolanvlc_media_playerMatch0.2.73
ORvideolanvlc_media_playerMatch0.2.80
ORvideolanvlc_media_playerMatch0.2.81
ORvideolanvlc_media_playerMatch0.2.82
ORvideolanvlc_media_playerMatch0.2.83
ORvideolanvlc_media_playerMatch0.2.90
ORvideolanvlc_media_playerMatch0.2.91
ORvideolanvlc_media_playerMatch0.2.92
ORvideolanvlc_media_playerMatch0.3.0
ORvideolanvlc_media_playerMatch0.3.1
ORvideolanvlc_media_playerMatch0.4.0
ORvideolanvlc_media_playerMatch0.4.1
ORvideolanvlc_media_playerMatch0.4.2
ORvideolanvlc_media_playerMatch0.4.3
ORvideolanvlc_media_playerMatch0.4.3-ac3
ORvideolanvlc_media_playerMatch0.4.4
ORvideolanvlc_media_playerMatch0.4.5
ORvideolanvlc_media_playerMatch0.4.6
ORvideolanvlc_media_playerMatch0.5.0
ORvideolanvlc_media_playerMatch0.5.1
ORvideolanvlc_media_playerMatch0.5.2
ORvideolanvlc_media_playerMatch0.5.3
ORvideolanvlc_media_playerMatch0.6.0
ORvideolanvlc_media_playerMatch0.6.1
ORvideolanvlc_media_playerMatch0.6.2
ORvideolanvlc_media_playerMatch0.7.0
ORvideolanvlc_media_playerMatch0.7.1
ORvideolanvlc_media_playerMatch0.7.2
ORvideolanvlc_media_playerMatch0.8.0
ORvideolanvlc_media_playerMatch0.8.1
ORvideolanvlc_media_playerMatch0.8.2
ORvideolanvlc_media_playerMatch0.8.4
ORvideolanvlc_media_playerMatch0.8.4a
ORvideolanvlc_media_playerMatch0.8.5
ORvideolanvlc_media_playerMatch0.8.6
ORvideolanvlc_media_playerMatch0.8.6a
ORvideolanvlc_media_playerMatch0.8.6b
ORvideolanvlc_media_playerMatch0.8.6c
ORvideolanvlc_media_playerMatch0.8.6d
ORvideolanvlc_media_playerMatch0.8.6e
ORvideolanvlc_media_playerMatch0.8.6f
ORvideolanvlc_media_playerMatch0.8.6g
ORvideolanvlc_media_playerMatch0.8.6h
ORvideolanvlc_media_playerMatch0.8.6i
ORvideolanvlc_media_playerMatch0.8.1337
ORvideolanvlc_media_playerMatch0.9.0
ORvideolanvlc_media_playerMatch0.9.1
ORvideolanvlc_media_playerMatch0.9.2
ORvideolanvlc_media_playerMatch0.9.3
ORvideolanvlc_media_playerMatch0.9.4
ORvideolanvlc_media_playerMatch0.9.5
ORvideolanvlc_media_playerMatch0.9.6
ORvideolanvlc_media_playerMatch0.9.8a
ORvideolanvlc_media_playerMatch0.9.9
ORvideolanvlc_media_playerMatch0.9.9a
ORvideolanvlc_media_playerMatch0.9.10
ORvideolanvlc_media_playerMatch1.0.0
ORvideolanvlc_media_playerMatch1.0.1
ORvideolanvlc_media_playerMatch1.0.2
ORvideolanvlc_media_playerMatch1.0.3
ORvideolanvlc_media_playerMatch1.0.4
ORvideolanvlc_media_playerMatch1.0.5
ORvideolanvlc_media_playerMatch1.0.6
ORvideolanvlc_media_playerMatch1.1.0
ORvideolanvlc_media_playerMatch1.1.1
ORvideolanvlc_media_playerMatch1.1.2
ORvideolanvlc_media_playerMatch1.1.3
ORvideolanvlc_media_playerMatch1.1.4
ORvideolanvlc_media_playerMatch1.1.4.1
ORvideolanvlc_media_playerMatch1.1.5
ORvideolanvlc_media_playerMatch1.1.6
ORvideolanvlc_media_playerMatch1.1.6.1
ORvideolanvlc_media_playerMatch1.1.7
ORvideolanvlc_media_playerMatch1.1.8
ORvideolanvlc_media_playerMatch1.1.9
ORvideolanvlc_media_playerMatch1.1.10
ORvideolanvlc_media_playerMatch1.1.10.1
ORvideolanvlc_media_playerMatch1.1.11
ORvideolanvlc_media_playerMatch1.1.13
ORvideolanvlc_media_playerMatch2.0.0
References
git.videolan.org/?p=vlc/vlc-2.0.git%3Ba=commitdiff%3Bh=16e9e126333fb7acb47d363366fee3deadc8331e
secunia.com/advisories/49835
www.openwall.com/lists/oss-security/2012/07/06/1
www.openwall.com/lists/oss-security/2012/07/06/2
www.securityfocus.com/bid/54345
www.securitytracker.com/id?1027224
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15299
Related
cvelist
cvelist
CVE-2012-3377
2012-07-12 21:00:00
prion
prion
Heap overflow
2012-07-12 21:55:00
debiancve
debiancve
CVE-2012-3377
2012-07-12 21:55:07
openvas
openvas
VLC Media Player OGG Demuxer Buffer Overflow Vulnerability - Windows
2012-07-25 00:00:00
VLC Media Player OGG Demuxer Buffer Overflow Vulnerability (Windows)
2012-07-25 00:00:00
Gentoo Security Advisory GLSA 201411-01
2015-09-29 00:00:00
nessus
nessus
VLC Media Player < 2.0.2 Multiple Vulnerabilities
2012-07-19 00:00:00
GLSA-201411-01 : VLC: Multiple vulnerabilities
2014-11-06 00:00:00
seebug
seebug
VLC Media Player 'OGG'文件远程堆缓冲区溢出漏洞
2012-07-10 00:00:00
ubuntucve
ubuntucve
CVE-2012-3377
2012-07-12 00:00:00
nvd
nvd
CVE-2012-3377
2012-07-12 21:55:07
gentoo
gentoo
VLC: Multiple vulnerabilities
2014-11-05 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2012-3377