Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-2484
HistoryJul 16, 2009 - 4:30 p.m.

CVE-2009-2484

2009-07-1616:30:00
Debian Security Bug Tracker
security-tracker.debian.org
6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.965 High

EPSS

Percentile

99.6%

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file.

OSVersionArchitecturePackageVersionFilename
Debian12allvlc< 3.0.21-0+deb12u1vlc_3.0.21-0+deb12u1_all.deb
Debian11allvlc< 3.0.21-0+deb11u1vlc_3.0.21-0+deb11u1_all.deb
Debian999allvlc< 3.0.21-1vlc_3.0.21-1_all.deb
Debian13allvlc< 3.0.21-1vlc_3.0.21-1_all.deb

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.965 High

EPSS

Percentile

99.6%