Lucene search
HistoryJul 12, 2012 - 9:55 p.m.
CVE-2012-3377
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file.
Affected configurations
Node
videolanvlc_media_playerRangeβ€2.0.1
ORvideolanvlc_media_playerMatch0.1.99a
ORvideolanvlc_media_playerMatch0.1.99b
ORvideolanvlc_media_playerMatch0.1.99c
ORvideolanvlc_media_playerMatch0.1.99d
ORvideolanvlc_media_playerMatch0.1.99e
ORvideolanvlc_media_playerMatch0.1.99f
ORvideolanvlc_media_playerMatch0.1.99g
ORvideolanvlc_media_playerMatch0.1.99h
ORvideolanvlc_media_playerMatch0.1.99i
ORvideolanvlc_media_playerMatch0.2.0
ORvideolanvlc_media_playerMatch0.2.50
ORvideolanvlc_media_playerMatch0.2.60
ORvideolanvlc_media_playerMatch0.2.61
ORvideolanvlc_media_playerMatch0.2.62
ORvideolanvlc_media_playerMatch0.2.63
ORvideolanvlc_media_playerMatch0.2.70
ORvideolanvlc_media_playerMatch0.2.71
ORvideolanvlc_media_playerMatch0.2.72
ORvideolanvlc_media_playerMatch0.2.73
ORvideolanvlc_media_playerMatch0.2.80
ORvideolanvlc_media_playerMatch0.2.81
ORvideolanvlc_media_playerMatch0.2.82
ORvideolanvlc_media_playerMatch0.2.83
ORvideolanvlc_media_playerMatch0.2.90
ORvideolanvlc_media_playerMatch0.2.91
ORvideolanvlc_media_playerMatch0.2.92
ORvideolanvlc_media_playerMatch0.3.0
ORvideolanvlc_media_playerMatch0.3.1
ORvideolanvlc_media_playerMatch0.4.0
ORvideolanvlc_media_playerMatch0.4.1
ORvideolanvlc_media_playerMatch0.4.2
ORvideolanvlc_media_playerMatch0.4.3
ORvideolanvlc_media_playerMatch0.4.3-ac3
ORvideolanvlc_media_playerMatch0.4.4
ORvideolanvlc_media_playerMatch0.4.5
ORvideolanvlc_media_playerMatch0.4.6
ORvideolanvlc_media_playerMatch0.5.0
ORvideolanvlc_media_playerMatch0.5.1
ORvideolanvlc_media_playerMatch0.5.2
ORvideolanvlc_media_playerMatch0.5.3
ORvideolanvlc_media_playerMatch0.6.0
ORvideolanvlc_media_playerMatch0.6.1
ORvideolanvlc_media_playerMatch0.6.2
ORvideolanvlc_media_playerMatch0.7.0
ORvideolanvlc_media_playerMatch0.7.1
ORvideolanvlc_media_playerMatch0.7.2
ORvideolanvlc_media_playerMatch0.8.0
ORvideolanvlc_media_playerMatch0.8.1
ORvideolanvlc_media_playerMatch0.8.2
ORvideolanvlc_media_playerMatch0.8.4
ORvideolanvlc_media_playerMatch0.8.4a
ORvideolanvlc_media_playerMatch0.8.5
ORvideolanvlc_media_playerMatch0.8.6
ORvideolanvlc_media_playerMatch0.8.6a
ORvideolanvlc_media_playerMatch0.8.6b
ORvideolanvlc_media_playerMatch0.8.6c
ORvideolanvlc_media_playerMatch0.8.6d
ORvideolanvlc_media_playerMatch0.8.6e
ORvideolanvlc_media_playerMatch0.8.6f
ORvideolanvlc_media_playerMatch0.8.6g
ORvideolanvlc_media_playerMatch0.8.6h
ORvideolanvlc_media_playerMatch0.8.6i
ORvideolanvlc_media_playerMatch0.8.1337
ORvideolanvlc_media_playerMatch0.9.0
ORvideolanvlc_media_playerMatch0.9.1
ORvideolanvlc_media_playerMatch0.9.2
ORvideolanvlc_media_playerMatch0.9.3
ORvideolanvlc_media_playerMatch0.9.4
ORvideolanvlc_media_playerMatch0.9.5
ORvideolanvlc_media_playerMatch0.9.6
ORvideolanvlc_media_playerMatch0.9.8a
ORvideolanvlc_media_playerMatch0.9.9
ORvideolanvlc_media_playerMatch0.9.9a
ORvideolanvlc_media_playerMatch0.9.10
ORvideolanvlc_media_playerMatch1.0.0
ORvideolanvlc_media_playerMatch1.0.1
ORvideolanvlc_media_playerMatch1.0.2
ORvideolanvlc_media_playerMatch1.0.3
ORvideolanvlc_media_playerMatch1.0.4
ORvideolanvlc_media_playerMatch1.0.5
ORvideolanvlc_media_playerMatch1.0.6
ORvideolanvlc_media_playerMatch1.1.0
ORvideolanvlc_media_playerMatch1.1.1
ORvideolanvlc_media_playerMatch1.1.2
ORvideolanvlc_media_playerMatch1.1.3
ORvideolanvlc_media_playerMatch1.1.4
ORvideolanvlc_media_playerMatch1.1.4.1
ORvideolanvlc_media_playerMatch1.1.5
ORvideolanvlc_media_playerMatch1.1.6
ORvideolanvlc_media_playerMatch1.1.6.1
ORvideolanvlc_media_playerMatch1.1.7
ORvideolanvlc_media_playerMatch1.1.8
ORvideolanvlc_media_playerMatch1.1.9
ORvideolanvlc_media_playerMatch1.1.10
ORvideolanvlc_media_playerMatch1.1.10.1
ORvideolanvlc_media_playerMatch1.1.11
ORvideolanvlc_media_playerMatch1.1.13
ORvideolanvlc_media_playerMatch2.0.0
References
git.videolan.org/?p=vlc/vlc-2.0.git%3Ba=commitdiff%3Bh=16e9e126333fb7acb47d363366fee3deadc8331e
secunia.com/advisories/49835
www.openwall.com/lists/oss-security/2012/07/06/1
www.openwall.com/lists/oss-security/2012/07/06/2
www.securityfocus.com/bid/54345
www.securitytracker.com/id?1027224
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15299
Related
cvelist
cvelist
CVE-2012-3377
2012-07-12 21:00:00
nessus
nessus
VLC Media Player < 2.0.2 Multiple Vulnerabilities
2012-07-19 00:00:00
GLSA-201411-01 : VLC: Multiple vulnerabilities
2014-11-06 00:00:00
openvas
openvas
VLC Media Player OGG Demuxer Buffer Overflow Vulnerability - Windows
2012-07-25 00:00:00
VLC Media Player OGG Demuxer Buffer Overflow Vulnerability (Windows)
2012-07-25 00:00:00
Gentoo Security Advisory GLSA 201411-01
2015-09-29 00:00:00
cve
cve
CVE-2012-3377
2012-07-12 21:55:07
seebug
seebug
VLC Media Player 'OGG'ζδ»ΆθΏη¨ε ηΌε²εΊζΊ’εΊζΌζ΄
2012-07-10 00:00:00
ubuntucve
ubuntucve
CVE-2012-3377
2012-07-12 00:00:00
prion
prion
Heap overflow
2012-07-12 21:55:00
debiancve
debiancve
CVE-2012-3377
2012-07-12 21:55:07
gentoo
gentoo
VLC: Multiple vulnerabilities
2014-11-05 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Related for NVD:CVE-2012-3377