VideoLAN VLC Media Player MKV Demuxer Code Execution

🗓️ 27 Jun 2011 00:00:00Reported by SAINT CorporationType

saint🔗 www.saintcorporation.com👁 41 Views

VideoLAN VLC Media Player MKV Demuxer Code Execution Added: 06/27/2011 CVE: [CVE-2011-0531](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0531>) BID: [46060](<http://www.securityfocus.com/bid/46060>) OSVDB: [70698](<http://www.osvdb.org/70698>) VLC media player is a media player supporting various audio and video formats for multiple platforms. VideoLan VLC 1.1.6.1 and earlier are vulnerable to a remote code execution vulnerability as a result of insufficient input validation by enticing a user to open a specially crafted MKV file. Upgrade to VLC media player 1.1.7 or higher. Patches for some older versions are also available. Exploit works on VideoLAN VLC 1.1.0. The user must open the exploit file on the target with a vulnerable version of VLC. Window

Reporter	Title	Published	Views	Family All 37
Tenable Nessus	VLC Media Player < 1.1.7 Code Execution Vulnerability (deprecated)	2 Feb 201100:00	–	nessus
Tenable Nessus	VLC Media Player < 1.1.7 Code Execution Vulnerability	2 Feb 201100:00	–	nessus
Tenable Nessus	Debian DSA-2159-1 : vlc - missing input sanitising	11 Feb 201100:00	–	nessus
Tenable Nessus	Debian DSA-2211-1 : vlc - missing input sanitising	7 Apr 201100:00	–	nessus
Tenable Nessus	GLSA-201411-01 : VLC: Multiple vulnerabilities	6 Nov 201400:00	–	nessus
Tenable Nessus	VLC Media Player < 1.1.7 MKV Input Validation Vulnerability	2 Feb 201100:00	–	nessus
Circl	CVE-2011-0531	8 Feb 201100:00	–	circl
Check Point Advisories	VideoLAN VLC MKV Memory Corruption (CVE-2011-0531)	16 Apr 201200:00	–	checkpoint_advisories
CVE	CVE-2011-0531	7 Feb 201120:19	–	cve
Cvelist	CVE-2011-0531	7 Feb 201120:19	–	cvelist

27 Jun 2011 00:00Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.4185