PT-2009-4891 · Videolan · Vlc Media Player

Trancer · Published 2009-07-16 · Updated 2017-09-19 · CVE-2009-2484

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VLC media player version 0.9.9

Description A stack-based buffer overflow issue exists in the Win32AddConnection function, located in modules/access/smb.c, which can be triggered by a long smb URI in a playlist file. This can cause a denial of service, resulting in an application crash, and potentially allow the execution of arbitrary code. The issue is caused by a boundary error within the Win32AddConnection() function and can be exploited by tricking a user into opening a malicious playlist file with an overly long "smb://" URI.

Recommendations For VLC media player version 0.9.9, consider disabling the Win32AddConnection() function until a patch is available to prevent exploitation. Restrict access to opening playlist files from untrusted sources to minimize the risk of exploitation. Avoid using overly long "smb://" URIs in playlist files until the issue is resolved.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-2484

Affected Products

Vlc Media Player

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vlc_smb_uri.rb · Exploit
• 🔥 http://exploit-db.com/exploits/9029 · Exploit
• 🔥 https://exploit-db.com/exploits/9029 · Exploit
• 🔥 https://exploit-db.com/exploits/16678 · Exploit
• 🔥 http://securityfocus.com/bid/35500 · Exploit
• http://vupen.com/english/advisories/2009/1714 · Vendor Advisory
• http://secunia.com/advisories/35558 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2484 · Security Note
• http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=e60a9038b13b5eb805a76755efc5c6d5e080180f · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2484 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14800 · Note