VLC Media Player Calling Convention Remote Buffer Overflow Vulnerability
BID:44909
Info
VLC Media Player Calling Convention Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 44909 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 02 2010 12:00AM |
| Updated: | Nov 02 2010 12:00AM |
| Credit: | shinnai |
| Vulnerable: |
VideoLAN VLC media player 1.1.4 VideoLAN VLC media player 1.1.2 VideoLAN VLC media player 1.1 VideoLAN VLC media player 1.1.3 VideoLAN VLC media player 1.1.1 |
| Not Vulnerable: |
VideoLAN VLC media player 1.1.5 |
Discussion
VLC Media Player Calling Convention Remote Buffer Overflow Vulnerability
VLC Media Player is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions.
Versions prior to VLC Media Player 1.1.5 for Windows are vulnerable.
VLC Media Player is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions.
Versions prior to VLC Media Player 1.1.5 for Windows are vulnerable.
Exploit / POC
VLC Media Player Calling Convention Remote Buffer Overflow Vulnerability
The following proofs of concept is available:
The following proofs of concept is available:
References
VLC Media Player Calling Convention Remote Buffer Overflow Vulnerability
References:
References:
- VLC Homepage (VideoLAN)
- VLC Multimedia Plug-in and/or Activex 1.1.4 MRL handler remote buffer overflow (shinnai)
- Security Advisory 1006 (VideoLAN)