CVE-2011-0531 demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted M...
HighCVSS 9.3
EPSS 41.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | <= 1.1.6.1 | No fix listed |
| videolan vlc media player | = 0.1.99b | No fix listed |
| videolan vlc media player | = 0.1.99e | No fix listed |
| videolan vlc media player | = 0.1.99f | No fix listed |
| videolan vlc media player | = 0.1.99g | No fix listed |
| videolan vlc media player | = 0.1.99h | No fix listed |
| videolan vlc media player | = 0.1.99i | No fix listed |
| videolan vlc media player | = 0.2.0 | No fix listed |
| videolan vlc media player | = 0.2.60 | No fix listed |
| videolan vlc media player | = 0.2.61 | No fix listed |
| videolan vlc media player | = 0.2.62 | No fix listed |
| videolan vlc media player | = 0.2.63 | No fix listed |
| videolan vlc media player | = 0.2.70 | No fix listed |
| videolan vlc media player | = 0.2.71 | No fix listed |
| videolan vlc media player | = 0.2.72 | No fix listed |
| videolan vlc media player | = 0.2.73 | No fix listed |
| videolan vlc media player | = 0.2.80 | No fix listed |
| videolan vlc media player | = 0.2.81 | No fix listed |
| videolan vlc media player | = 0.2.82 | No fix listed |
| videolan vlc media player | = 0.2.83 | No fix listed |
| videolan vlc media player | = 0.2.90 | No fix listed |
| videolan vlc media player | = 0.2.91 | No fix listed |
| videolan vlc media player | = 0.2.92 | No fix listed |
| videolan vlc media player | = 0.3.0 | No fix listed |
| videolan vlc media player | = 0.3.1 | No fix listed |
Show 47 more
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.4.0 | No fix listed |
| videolan vlc media player | = 0.4.1 | No fix listed |
| videolan vlc media player | = 0.4.2 | No fix listed |
| videolan vlc media player | = 0.4.3 | No fix listed |
| videolan vlc media player | = 0.4.4 | No fix listed |
| videolan vlc media player | = 0.4.5 | No fix listed |
| videolan vlc media player | = 0.4.6 | No fix listed |
| videolan vlc media player | = 0.5.0 | No fix listed |
| videolan vlc media player | = 0.5.1 | No fix listed |
| videolan vlc media player | = 0.5.2 | No fix listed |
| videolan vlc media player | = 0.5.3 | No fix listed |
| videolan vlc media player | = 0.6.0 | No fix listed |
| videolan vlc media player | = 0.6.1 | No fix listed |
| videolan vlc media player | = 0.6.2 | No fix listed |
| videolan vlc media player | = 0.7.0 | No fix listed |
| videolan vlc media player | = 0.7.2 | No fix listed |
| videolan vlc media player | = 0.8.0 | No fix listed |
| videolan vlc media player | = 0.8.1 | No fix listed |
| videolan vlc media player | = 0.8.2 | No fix listed |
| videolan vlc media player | = 0.8.4 | No fix listed |
| videolan vlc media player | = 0.8.5 | No fix listed |
| videolan vlc media player | = 0.8.6 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| videolan vlc media player | = 0.9.5 | No fix listed |
| videolan vlc media player | = 0.9.6 | No fix listed |
| videolan vlc media player | = 0.9.8a | No fix listed |
| videolan vlc media player | = 0.9.9 | No fix listed |
| videolan vlc media player | = 0.9.10 | No fix listed |
| videolan vlc media player | = 1.0.0 | No fix listed |
| videolan vlc media player | = 1.0.1 | No fix listed |
| videolan vlc media player | = 1.0.2 | No fix listed |
| videolan vlc media player | = 1.0.3 | No fix listed |
| videolan vlc media player | = 1.0.4 | No fix listed |
| videolan vlc media player | = 1.0.5 | No fix listed |
| videolan vlc media player | = 1.0.6 | No fix listed |
| videolan vlc media player | = 1.1.0 | No fix listed |
| videolan vlc media player | = 1.1.1 | No fix listed |
| videolan vlc media player | = 1.1.2 | No fix listed |
| videolan vlc media player | = 1.1.3 | No fix listed |
| videolan vlc media player | = 1.1.4 | No fix listed |
| videolan vlc media player | = 1.1.5 | No fix listed |
| videolan vlc media player | = 1.1.6 | No fix listed |
| debian/vlc(Debian:12) | < 1.1.7-1 | 1.1.7-1 |
| debian/vlc(Debian:13) | < 1.1.7-1 | 1.1.7-1 |
| debian/vlc(Debian:14) | < 1.1.7-1 | 1.1.7-1 |
References
- Debian Security Tracker CVE-2011-0531 vendor-advisory
- git.videolan.org
- 70698 vdb-entry
- 43131 third-party-advisory vendor-advisory
- 43242 third-party-advisory
- DSA-2159 vendor-advisory
- [oss-security] 20110131 CVE request: code execution in VLC media player mailing-list patch
- [oss-security] 20110131 Re: CVE request: code execution in VLC media player mailing-list patch
- 46060 vdb-entry
- 1025018 vdb-entry
- www.videolan.org patch vendor-advisory
- ADV-2011-0363 vdb-entry
- vlc-mkv-code-execution(65045) vdb-entry
- oval:org.mitre.oval:def:12415 signature vdb-entry