PT-2011-3940 · Videolan · Vlc Media Player

Publicado

2011-07-26

·

Atualizado

2024-06-15

·

CVE-2011-2588

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 1.1.11
Description A heap-based buffer overflow issue exists in the AVI demuxer, specifically in the AVI ChunkRead strf function in libavi.c. This is due to an integer underflow error when parsing the strf chunk within AVI files, which can be exploited to cause a heap-based buffer overflow. Successful exploitation allows execution of arbitrary code, potentially compromising a user's system.
Recommendations For versions prior to 1.1.11, update to version 1.1.11 or later to resolve the issue. As a temporary workaround, consider avoiding the use of AVI files or restricting access to potentially malicious AVI media files until the update is applied.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-2588
OPENSUSE-SU-2024:10064-1

Produtos afetados

Vlc Media Player