VLC Media Player XSPF Playlist Memory Corruption Vulnerability

Bugtraq ID:	31758
Class:	Boundary Condition Error
CVE:	CVE-2008-4558
Remote:	Yes
Local:	No
Published:	Oct 14 2008 12:00AM
Updated:	May 07 2015 05:22PM
Credit:	Francisco Falcon from Core Security Technologies.
Vulnerable:	VideoLAN VLC media player 0.9.2
Not Vulnerable:	VideoLAN VLC media player 0.9.3

VLC Media Player XSPF Playlist Memory Corruption Vulnerability

VLC media player is prone to a heap-based memory-corruption vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Versions prior to VLC Media Player 0.9.3 are vulnerable to this issue.

VLC Media Player XSPF Playlist Memory Corruption Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to open a malicious XSPF file with the vulnerable application.

The following proof of concept is available:

• /data/vulnerabilities/exploits/31758.py

VLC Media Player XSPF Playlist Memory Corruption Vulnerability

Solution:
The vendor has provided fixes. Please see the references for more information.

VLC Media Player XSPF Playlist Memory Corruption Vulnerability

References:

• VLC Homepage (VideoLAN)
  
• CORE-2008-1010: VLC media player XSPF Memory Corruption (CORE Security Technologies Advisories )
  
• VLC media player XSPF Memory Corruption (Core Security Technologies)