VLC Media Player Bookmark Creation Buffer Overflow Vulnerability

Bugtraq ID:	38569
Class:	Boundary Condition Error
CVE:	CVE-2011-1087
Remote:	Yes
Local:	No
Published:	Mar 05 2010 12:00AM
Updated:	Nov 10 2014 12:57AM
Credit:	Gjoko Krstic
Vulnerable:	VideoLAN VLC media player 1.0.5 VideoLAN VLC media player 1.0.3 VideoLAN VLC media player 1.0.2 VideoLAN VLC media player 1.0.1 VideoLAN VLC media player 1.0 Gentoo Linux
Not Vulnerable:

VLC Media Player Bookmark Creation Buffer Overflow Vulnerability

VLC Media Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

VLC Media Player 1.0.5 is vulnerable; other versions may also be affected.

VLC Media Player Bookmark Creation Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/aimp2_evil.mp3

VLC Media Player Bookmark Creation Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

VLC Media Player Bookmark Creation Buffer Overflow Vulnerability

References:

• VLC Homepage (VideoLAN)
  
• VLC media player 1.0.5 Goldeneye (bookmarks) Remote Buffer Overflow PoC (Gjoko Krstic)