VLC Media Player Multiple Remote Stack Buffer Overflow Vulnerabilities
BID:36439
Info
VLC Media Player Multiple Remote Stack Buffer Overflow Vulnerabilities
| Bugtraq ID: | 36439 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 17 2009 12:00AM |
| Updated: | Sep 28 2009 05:40PM |
| Credit: | Sebastian Apelt, Siberas |
| Vulnerable: |
VideoLAN VLC media player 1.0.1 VideoLAN VLC media player 1.0 VideoLAN VLC media player 0.9.9 VideoLAN VLC media player 0.9.7 VideoLAN VLC media player 0.9.6 VideoLAN VLC media player 0.9.5 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoLAN VLC media player 0.9 VideoLAN VLC media player 0.8.6 i VideoLAN VLC media player 0.8.6 h VideoLAN VLC media player 0.8.6 g VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 VideoLAN VLC media player 0.9.8a VideoLAN VLC media player 0.8.6f VideoLAN VLC media player 0.8.6e VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Pardus Linux 2009 0 |
| Not Vulnerable: |
VideoLAN VLC media player 1.0.2 |
Discussion
VLC Media Player Multiple Remote Stack Buffer Overflow Vulnerabilities
VLC media player is prone to multiple stack-based buffer-overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application or crash the application, denying service to legitimate users.
VLC media player 1.0.1 is vulnerable; prior versions may also be affected.
VLC media player is prone to multiple stack-based buffer-overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application or crash the application, denying service to legitimate users.
VLC media player 1.0.1 is vulnerable; prior versions may also be affected.
Exploit / POC
VLC Media Player Multiple Remote Stack Buffer Overflow Vulnerabilities
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
VLC Media Player Multiple Remote Stack Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
VLC Media Player Multiple Remote Stack Buffer Overflow Vulnerabilities
References:
References:
- Fixed potential stack overflow in asf demuxer. (Laurent Aimar)
- Fixed potential stack overflow in avi demuxer. (Laurent Aimar)
- Fixed potential stack overflow in mp4 demuxer. (Laurent Aimar)
- VLC Homepage (VideoLAN)
- VideoLAN-SA-0901: Stack overflow in MPA, AVI and ASF demuxer (VideoLAN)