PT-2019-15307 · Videolan+1 · Vlc Media Player+1

Code16 · Publicado 2019-10-23 · Atualizado 2020-08-24 · CVE-2019-18278

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.8

Description The issue occurs when executing VideoLAN VLC media player 3.0.8 with libqt on Windows. Data from a faulting address controls code flow, starting at a specific location within the libqt plugin. The VideoLAN security team has not been contacted about this issue and is unable to reproduce it.

Recommendations For version 3.0.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2019-18278

Produtos afetados

Vlc Media Player

Libqt

Referências · 4

• 🔥 https://code610.blogspot.com/2019/10/random-bytes-in-vlc-308.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-18278 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18278 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-18278 · Nota de Segurança