CVE-2007-6262

2007-12-0602:46:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.328

Percentile

97.1%

JSON

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a “bad initialized pointer,” aka a “recursive plugin release vulnerability.”

Affected configurations

Nvd

Node

videolanvlc_media_playerMatch0.8.6

videolanvlc_media_playerMatch0.8.6a

videolanvlc_media_playerMatch0.8.6b

VendorProductVersionCPE
videolanvlc_media_player0.8.6cpe:2.3:a:videolan:vlc_media_player:0.8.6:*:*:*:*:*:*:*
videolanvlc_media_player0.8.6acpe:2.3:a:videolan:vlc_media_player:0.8.6a:*:*:*:*:*:*:*
videolanvlc_media_player0.8.6bcpe:2.3:a:videolan:vlc_media_player:0.8.6b:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
videolan	vlc_media_player	0.8.6	cpe:2.3:a:videolan:vlc_media_player:0.8.6:::::::*
videolan	vlc_media_player	0.8.6a	cpe:2.3:a:videolan:vlc_media_player:0.8.6a:::::::*
videolan	vlc_media_player	0.8.6b	cpe:2.3:a:videolan:vlc_media_player:0.8.6b:::::::*