VLC Media Player '.AVI' File BOF Vulnerability (Linux)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayeravibofvulnlin.nasl 7052 2017-09-04 11:50:51Z teissa $ VLC Media Player '.AVI' File BOF Vulnerability Linux Authors: Madhuri D Copyright: Copyright c 2011...

CVE-2011-2588

The CVE-2011-2588 entry describes a heap-based buffer overflow in VLC’s AVI demuxer (AVI_ChunkRead_strf in libavi.c) that can be triggered by a crafted AVI file. This allows remote crashes or possibly arbitrary code execution and affects VLC versions before 1.1.11. Mitigation: upgrade VLC to 1.1....