VLC Media Player Real Demuxer Remote Denial of Service Vulnerability
BID:45632
Info
VLC Media Player Real Demuxer Remote Denial of Service Vulnerability
| Bugtraq ID: | 45632 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3907 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 31 2010 12:00AM |
| Updated: | Mar 19 2015 08:33AM |
| Credit: | Dan Rosenberg |
| Vulnerable: |
VideoLAN VLC media player 1.1.4 VideoLAN VLC media player 1.1.3 VideoLAN VLC media player 1.1.2 VideoLAN VLC media player 1.1.1 VideoLAN VLC media player 1.1 VideoLAN VLC media player 1.0.6 VideoLAN VLC media player 1.0.5 VideoLAN VLC media player 1.0.3 VideoLAN VLC media player 1.0.2 VideoLAN VLC media player 1.0.1 VideoLAN VLC media player 1.0 VideoLAN VLC media player 0.9.9 VideoLAN VLC media player 0.9.7 VideoLAN VLC media player 0.9.6 VideoLAN VLC media player 0.9.5 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoLAN VLC media player 0.9 VideoLAN VLC media player 0.8.6 i VideoLAN VLC media player 0.8.6 h VideoLAN VLC media player 0.8.6 g VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 VideoLAN VLC media player 0.6.8 VideoLAN VLC media player 0.5 VideoLAN VLC media player 1.1.5 VideoLAN VLC media player 1.1.3 VideoLAN VLC media player 1.1.2 VideoLAN VLC media player 1.1.1 VideoLAN VLC media player 1.1.0 VideoLAN VLC media player 1.0.4 VideoLAN VLC media player 0.9.8a VideoLAN VLC media player 0.8.6f VideoLAN VLC media player 0.8.6e VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Gentoo Linux |
| Not Vulnerable: |
VideoLAN VLC media player 1.1.6 |
Discussion
VLC Media Player Real Demuxer Remote Denial of Service Vulnerability
VLC media player is prone to a remote denial-of-service vulnerability because the application fails to sufficiently validate user-supplied input.
Attackers may leverage this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code-execution may be possible; however this has not been confirmed.
VLC Media Player versions prior to 1.1.6 are affected.
VLC media player is prone to a remote denial-of-service vulnerability because the application fails to sufficiently validate user-supplied input.
Attackers may leverage this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code-execution may be possible; however this has not been confirmed.
VLC Media Player versions prior to 1.1.6 are affected.