CVE-2011-0021 Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute a...
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | <= 1.1.5 | No fix listed |
| videolan vlc media player | = 0.1.99b | No fix listed |
| videolan vlc media player | = 0.1.99e | No fix listed |
| videolan vlc media player | = 0.1.99f | No fix listed |
| videolan vlc media player | = 0.1.99g | No fix listed |
| videolan vlc media player | = 0.1.99h | No fix listed |
| videolan vlc media player | = 0.1.99i | No fix listed |
| videolan vlc media player | = 0.2.0 | No fix listed |
| videolan vlc media player | = 0.2.60 | No fix listed |
| videolan vlc media player | = 0.2.61 | No fix listed |
| videolan vlc media player | = 0.2.62 | No fix listed |
| videolan vlc media player | = 0.2.63 | No fix listed |
| videolan vlc media player | = 0.2.70 | No fix listed |
| videolan vlc media player | = 0.2.71 | No fix listed |
| videolan vlc media player | = 0.2.72 | No fix listed |
| videolan vlc media player | = 0.2.73 | No fix listed |
| videolan vlc media player | = 0.2.80 | No fix listed |
| videolan vlc media player | = 0.2.81 | No fix listed |
| videolan vlc media player | = 0.2.82 | No fix listed |
| videolan vlc media player | = 0.2.83 | No fix listed |
| videolan vlc media player | = 0.2.90 | No fix listed |
| videolan vlc media player | = 0.2.91 | No fix listed |
| videolan vlc media player | = 0.2.92 | No fix listed |
| videolan vlc media player | = 0.3.0 | No fix listed |
| videolan vlc media player | = 0.3.1 | No fix listed |
Show 45 more
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.4.0 | No fix listed |
| videolan vlc media player | = 0.4.1 | No fix listed |
| videolan vlc media player | = 0.4.2 | No fix listed |
| videolan vlc media player | = 0.4.3 | No fix listed |
| videolan vlc media player | = 0.4.4 | No fix listed |
| videolan vlc media player | = 0.4.5 | No fix listed |
| videolan vlc media player | = 0.4.6 | No fix listed |
| videolan vlc media player | = 0.5.0 | No fix listed |
| videolan vlc media player | = 0.5.1 | No fix listed |
| videolan vlc media player | = 0.5.2 | No fix listed |
| videolan vlc media player | = 0.5.3 | No fix listed |
| videolan vlc media player | = 0.6.0 | No fix listed |
| videolan vlc media player | = 0.6.1 | No fix listed |
| videolan vlc media player | = 0.6.2 | No fix listed |
| videolan vlc media player | = 0.7.0 | No fix listed |
| videolan vlc media player | = 0.7.2 | No fix listed |
| videolan vlc media player | = 0.8.0 | No fix listed |
| videolan vlc media player | = 0.8.1 | No fix listed |
| videolan vlc media player | = 0.8.2 | No fix listed |
| videolan vlc media player | = 0.8.4 | No fix listed |
| videolan vlc media player | = 0.8.5 | No fix listed |
| videolan vlc media player | = 0.8.6 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| videolan vlc media player | = 0.9.5 | No fix listed |
| videolan vlc media player | = 0.9.6 | No fix listed |
| videolan vlc media player | = 0.9.8a | No fix listed |
| videolan vlc media player | = 0.9.9 | No fix listed |
| videolan vlc media player | = 0.9.10 | No fix listed |
| videolan vlc media player | = 1.0.0 | No fix listed |
| videolan vlc media player | = 1.0.1 | No fix listed |
| videolan vlc media player | = 1.0.2 | No fix listed |
| videolan vlc media player | = 1.0.3 | No fix listed |
| videolan vlc media player | = 1.0.4 | No fix listed |
| videolan vlc media player | = 1.0.5 | No fix listed |
| videolan vlc media player | = 1.0.6 | No fix listed |
| videolan vlc media player | = 1.1.0 | No fix listed |
| videolan vlc media player | = 1.1.1 | No fix listed |
| videolan vlc media player | = 1.1.2 | No fix listed |
| videolan vlc media player | = 1.1.3 | No fix listed |
| videolan vlc media player | = 1.1.4 | No fix listed |
| debian/vlc(Debian:12) | < 1.1.3-1squeeze2 | 1.1.3-1squeeze2 |
| debian/vlc(Debian:13) | < 1.1.3-1squeeze2 | 1.1.3-1squeeze2 |
| debian/vlc(Debian:14) | < 1.1.3-1squeeze2 | 1.1.3-1squeeze2 |
References
- download.videolan.org patch
- git.videolan.org
- [oss-security] 20110119 CVE request: heap corruption in VLC media player mailing-list
- [oss-security] 20110120 Re: CVE request: heap corruption in VLC media player mailing-list patch
- 45927 vdb-entry
- ADV-2011-0185 vdb-entry vendor-advisory
- vlcmediaplayer-cdg-code-execution(64879) vdb-entry
- oval:org.mitre.oval:def:12460 signature vdb-entry
- Debian Security Tracker CVE-2011-0021 vendor-advisory