Lucene search
RootSSV:60270HistoryJul 10, 2012 - 12:00 a.m.
VLC Media Player 'OGG'文件远程堆缓冲区溢出漏洞
2012-07-1000:00:00
Root
www.seebug.org
8
0.05 Low
EPSS
Percentile
92.9%
BUGTRAQ ID: 54345
CVE ID: CVE-2012-3377
VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。
VLC Media Player 2.0.2在处理OGG容器文件时，"Ogg_DecodePacket()"函数(modules/demux/ogg.c)存在边界错误，通过特制的OGG文件可造成堆缓冲区溢出，执行任意代码。
0
VideoLAN VLC Media Player 2.x
厂商补丁：
VideoLAN
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
nessus
nessus
VLC Media Player < 2.0.2 Multiple Vulnerabilities
2012-07-19 00:00:00
GLSA-201411-01 : VLC: Multiple vulnerabilities
2014-11-06 00:00:00
prion
prion
Heap overflow
2012-07-12 21:55:00
debiancve
debiancve
CVE-2012-3377
2012-07-12 21:55:07
openvas
openvas
VLC Media Player OGG Demuxer Buffer Overflow Vulnerability - Windows
2012-07-25 00:00:00
VLC Media Player OGG Demuxer Buffer Overflow Vulnerability (Windows)
2012-07-25 00:00:00
Gentoo Security Advisory GLSA 201411-01
2015-09-29 00:00:00
cvelist
cvelist
CVE-2012-3377
2012-07-12 21:00:00
cve
cve
CVE-2012-3377
2012-07-12 21:55:07
ubuntucve
ubuntucve
CVE-2012-3377
2012-07-12 00:00:00
nvd
nvd
CVE-2012-3377
2012-07-12 21:55:07
gentoo
gentoo
VLC: Multiple vulnerabilities
2014-11-05 00:00:00