CVE-2010-3276 libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.
HighCVSS 9.3
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | <= 1.1.7 | No fix listed |
| videolan vlc media player | = 0.1.99b | No fix listed |
| videolan vlc media player | = 0.1.99e | No fix listed |
| videolan vlc media player | = 0.1.99f | No fix listed |
| videolan vlc media player | = 0.1.99g | No fix listed |
| videolan vlc media player | = 0.1.99h | No fix listed |
| videolan vlc media player | = 0.1.99i | No fix listed |
| videolan vlc media player | = 0.2.0 | No fix listed |
| videolan vlc media player | = 0.2.60 | No fix listed |
| videolan vlc media player | = 0.2.61 | No fix listed |
| videolan vlc media player | = 0.2.62 | No fix listed |
| videolan vlc media player | = 0.2.63 | No fix listed |
| videolan vlc media player | = 0.2.70 | No fix listed |
| videolan vlc media player | = 0.2.71 | No fix listed |
| videolan vlc media player | = 0.2.72 | No fix listed |
| videolan vlc media player | = 0.2.73 | No fix listed |
| videolan vlc media player | = 0.2.80 | No fix listed |
| videolan vlc media player | = 0.2.81 | No fix listed |
| videolan vlc media player | = 0.2.82 | No fix listed |
| videolan vlc media player | = 0.2.83 | No fix listed |
| videolan vlc media player | = 0.2.90 | No fix listed |
| videolan vlc media player | = 0.2.91 | No fix listed |
| videolan vlc media player | = 0.2.92 | No fix listed |
| videolan vlc media player | = 0.3.0 | No fix listed |
| videolan vlc media player | = 0.3.1 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.4.0 | No fix listed |
| videolan vlc media player | = 0.4.1 | No fix listed |
| videolan vlc media player | = 0.4.2 | No fix listed |
| videolan vlc media player | = 0.4.3 | No fix listed |
| videolan vlc media player | = 0.4.4 | No fix listed |
| videolan vlc media player | = 0.4.5 | No fix listed |
| videolan vlc media player | = 0.4.6 | No fix listed |
| videolan vlc media player | = 0.5.0 | No fix listed |
| videolan vlc media player | = 0.5.1 | No fix listed |
| videolan vlc media player | = 0.5.2 | No fix listed |
| videolan vlc media player | = 0.5.3 | No fix listed |
| videolan vlc media player | = 0.6.0 | No fix listed |
| videolan vlc media player | = 0.6.1 | No fix listed |
| videolan vlc media player | = 0.6.2 | No fix listed |
| videolan vlc media player | = 0.7.0 | No fix listed |
| videolan vlc media player | = 0.7.2 | No fix listed |
| videolan vlc media player | = 0.8.0 | No fix listed |
| videolan vlc media player | = 0.8.1 | No fix listed |
| videolan vlc media player | = 0.8.2 | No fix listed |
| videolan vlc media player | = 0.8.4 | No fix listed |
| videolan vlc media player | = 0.8.5 | No fix listed |
| videolan vlc media player | = 0.8.6 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| videolan vlc media player | = 0.9.5 | No fix listed |
| videolan vlc media player | = 0.9.6 | No fix listed |
| videolan vlc media player | = 0.9.8a | No fix listed |
| videolan vlc media player | = 0.9.9 | No fix listed |
| videolan vlc media player | = 0.9.10 | No fix listed |
| videolan vlc media player | = 1.0.0 | No fix listed |
| videolan vlc media player | = 1.0.1 | No fix listed |
| videolan vlc media player | = 1.0.2 | No fix listed |
| videolan vlc media player | = 1.0.3 | No fix listed |
| videolan vlc media player | = 1.0.4 | No fix listed |
| videolan vlc media player | = 1.0.5 | No fix listed |
| videolan vlc media player | = 1.0.6 | No fix listed |
| videolan vlc media player | = 1.1.0 | No fix listed |
| videolan vlc media player | = 1.1.1 | No fix listed |
| videolan vlc media player | = 1.1.2 | No fix listed |
| videolan vlc media player | = 1.1.3 | No fix listed |
| videolan vlc media player | = 1.1.4 | No fix listed |
| videolan vlc media player | = 1.1.5 | No fix listed |
| videolan vlc media player | = 1.1.6 | No fix listed |
| videolan vlc media player | = 1.1.6.1 | No fix listed |
| debian/vlc(Debian:12) | < 1.1.8-1 | 1.1.8-1 |
| debian/vlc(Debian:13) | < 1.1.8-1 | 1.1.8-1 |
| debian/vlc(Debian:14) | < 1.1.8-1 | 1.1.8-1 |
References
- 43826 third-party-advisory vendor-advisory
- 8162 third-party-advisory
- 1025250 vdb-entry
- www.coresecurity.com
- DSA-2211 vendor-advisory
- 71278 vdb-entry
- 20110323 CORE-2011-0208: VLC Vulnerabilities handling .AMV and .NSV files mailing-list
- 47012 exploit vdb-entry
- www.videolan.org patch
- ADV-2011-0759 vdb-entry vendor-advisory
- vlcmediaplayer-nsv-bo(66260) vdb-entry
- oval:org.mitre.oval:def:14873 signature vdb-entry
- Debian Security Tracker CVE-2010-3276 vendor-advisory