VLC Media Player '.m2v' File Memory Corruption Vulnerability
BID:72106
Info
VLC Media Player '.m2v' File Memory Corruption Vulnerability
| Bugtraq ID: | 72106 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2014-9598 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 16 2015 12:00AM |
| Updated: | Jul 05 2016 09:44PM |
| Credit: | Veysel hatas |
| Vulnerable: |
Gentoo Linux |
| Not Vulnerable: | |
Discussion
VLC Media Player '.m2v' File Memory Corruption Vulnerability
VLC Media Player is prone to a memory-corruption vulnerability.
Attackers can exploit this issue to cause an arbitrary code execution and to crash the application resulting in a denial-of-service condition.
VLC Media Player 2.1.5 is vulnerable.
VLC Media Player is prone to a memory-corruption vulnerability.
Attackers can exploit this issue to cause an arbitrary code execution and to crash the application resulting in a denial-of-service condition.
VLC Media Player 2.1.5 is vulnerable.
Exploit / POC
VLC Media Player '.m2v' File Memory Corruption Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file with the affected application.
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file with the affected application.
Solution / Fix
VLC Media Player '.m2v' File Memory Corruption Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
VLC Media Player '.m2v' File Memory Corruption Vulnerability
References:
References:
- VLC Homepage (VideoLAN)
- VLC Player 2.1.5 Write Access Violation Vulnerability (videolan)