Vulners
Lucene search
VideoLAN VLC Media Player 2.1.5 - DEP Access Violation
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | VLC Media Player '.flv' File Memory Corruption Vulnerability | 20 Jan 201500:00 | – | cnvd |
 | CVE-2014-9597 | 21 Jan 201511:00 | – | cve |
 | CVE-2014-9597 | 21 Jan 201511:00 | – | cvelist |
 | EUVD-2014-9411 | 7 Oct 202500:30 | – | euvd |
 | VideoLAN VLC Media Player 2.1.5 - DEP Access Violation | 26 Jan 201500:00 | – | exploitpack |
 | GLSA-201603-08 : VLC: Multiple vulnerabilities | 14 Mar 201600:00 | – | nessus |
| VLC < 2.1.6 Multiple Vulnerabilities | 24 Jun 202000:00 | – | nessus |
 | VLC: Multiple vulnerabilities | 12 Mar 201600:00 | – | gentoo |
 | KLA10451 Multiple vulnerabilities in VLC | 21 Jan 201500:00 | – | kaspersky |
 | CVE-2014-9597 | 21 Jan 201515:17 | – | nvd |
10
Title : VLC Player 2.1.5 DEP Access Violation Vulnerability
Discoverer: Veysel HATAS (@muh4f1z)
Web page : www.binarysniper.net
Vendor : VideoLAN VLC Project
Test: Windows XP SP3
Status: Fixed
Severity : High
CVE ID : CVE-2014-9597
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-9597>
NIST: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9597
OSVDB ID : 116450 <http://osvdb.org/show/osvdb/116450>
VLC Ticket : 13389 <https://trac.videolan.org/vlc/ticket/13389>
windbglog : windbglog.txt
<https://trac.videolan.org/vlc/attachment/ticket/13389/windbglog.txt>
Discovered : 24 November 2014
Reported : 26 December 2014
Published : 9 January 2015
Description : VLC Media Player contains a flaw that is triggered as
user-supplied input is not properly sanitized when handling a specially crafted
FLV file <http://www.datafilehost.com/d/9565165f>. This may allow a
context-dependent attacker to corrupt memory and potentially execute
arbitrary code.
# Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35901-poc.flv
# Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35901-windbglog.txtData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
26 Jan 2015 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS 26.8
EPSS0.08494