PT-2012-2247 · Videolan · Vlc Media Player

Clement Lecigne · Publicado 2012-10-30 · Atualizado 2017-11-30 · CVE-2012-0023

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions 0.9.0 through 1.1.12

Description The issue is related to a double free vulnerability in the get chunk header function. This vulnerability allows remote attackers to cause a denial of service, resulting in the application crashing, and possibly execute arbitrary code via a crafted TiVo file.

Recommendations For versions 0.9.0 through 1.1.12, consider updating to a version that contains a fix for this issue, as using a crafted TiVo file could lead to a denial of service or arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2012-0023

Produtos afetados

Vlc Media Player

Referências · 16

• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0023 · Aviso do Fabricante
• http://secunia.com/advisories/47325 · Aviso do Fabricante
• http://securityfocus.com/bid/51231 · Nota
• http://videolan.org/security/sa1108.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/10/29/5 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-0023 · Aviso do Fabricante
• http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=7d282fac1cc455b5a5eca2bb56375efcbf879b06 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0023 · Nota de Segurança
• http://osvdb.org/77975 · Nota
• https://videolan.org/security/sa1108.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71916 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15893 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0023 · Nota
• https://osv.dev/vulnerability/CVE-2012-0023 · Aviso do Fabricante
• http://securitytracker.com/id?1026449 · Nota