Lucene search

K
nessusTenable6355.PRM
HistoryMar 21, 2012 - 12:00 a.m.

VLC Media Player < 2.0.1 Multiple RCE

2012-03-2100:00:00
Tenable
www.tenable.com
11

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.965 High

EPSS

Percentile

99.6%

The remote host is running VLC 2.x prior to 2.0.1 and is affected by multiple vulnerabilities :

  • A stack overflow exists in MMS support. (CVE-2012-1775)
  • Multiple heap overflows exist in Real RTSP support. (CVE-2012-1776)
Binary data 6355.prm
VendorProductVersionCPE
videolanvlc_media_playercpe:/a:videolan:vlc_media_player

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.965 High

EPSS

Percentile

99.6%