Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2007-6262
HistoryDec 06, 2007 - 2:46 a.m.

CVE-2007-6262

2007-12-0602:46:00
Debian Security Bug Tracker
security-tracker.debian.org
9

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.328

Percentile

97.1%

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a “bad initialized pointer,” aka a “recursive plugin release vulnerability.”

OSVersionArchitecturePackageVersionFilename
Debian12allvlc< 3.0.21-0+deb12u1vlc_3.0.21-0+deb12u1_all.deb
Debian11allvlc< 3.0.21-0+deb11u1vlc_3.0.21-0+deb11u1_all.deb
Debian999allvlc< 3.0.21-2vlc_3.0.21-2_all.deb
Debian13allvlc< 3.0.21-2vlc_3.0.21-2_all.deb

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.328

Percentile

97.1%