Lucene search

K
freebsdFreeBSDE7D91A3C-A7C9-11DF-870C-00242B513D7C
HistoryJul 29, 2010 - 12:00 a.m.

vlc -- invalid id3v2 tags may lead to invalid memory dereferencing

2010-07-2900:00:00
vuxml.freebsd.org
16

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.023 Low

EPSS

Percentile

89.7%

VideoLAN project reports:

VLC fails to perform sufficient input validation when trying to
extract some meta-informations about input media through ID3v2
tags. In the failure case, VLC attempt dereference an invalid
memory address, and a crash will ensure.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchvlc< 1.1.2_1,3UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.023 Low

EPSS

Percentile

89.7%