VLC Media Player TY File Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	31813
Class:	Boundary Condition Error
CVE:	CVE-2008-4654
Remote:	Yes
Local:	No
Published:	Oct 18 2008 12:00AM
Updated:	May 07 2015 05:22PM
Credit:	Tobias Klein
Vulnerable:	VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoLAN VLC media player 0.9
Not Vulnerable:

VLC Media Player TY File Stack Based Buffer Overflow Vulnerability

VLC media player is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

VLC media player 0.9.0 up to and including 0.9.4 are vulnerable.

VLC Media Player TY File Stack Based Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following exploit code is available:

• /data/vulnerabilities/exploits/31813.pl

VLC Media Player TY File Stack Based Buffer Overflow Vulnerability

Solution:
Fixes are available in the VLC source code repositories. Please see the references for more information.

Reportedly, the issue will also be fixed in the upcoming release of VLC media player 0.9.5.

VLC Media Player TY File Stack Based Buffer Overflow Vulnerability

References:

• VLC Homepage (VideoLAN)
  
• VLC official GIT repository (VideoLAN)
  
• [TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability (Tobias Klein )
  
• Security Advisory 0809 (VideoLAN)