CVE-2011-2194 Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspe...
HighCVSS 9.3
EPSS 9.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/vlc(Debian:12) | < 1.1.10-1 | 1.1.10-1 |
| debian/vlc(Debian:13) | < 1.1.10-1 | 1.1.10-1 |
| debian/vlc(Debian:14) | < 1.1.10-1 | 1.1.10-1 |
| videolan vlc media player | = 0.8.5 | No fix listed |
| videolan vlc media player | = 0.8.6 | No fix listed |
| videolan vlc media player | = 0.8.6a | No fix listed |
| videolan vlc media player | = 0.8.6b | No fix listed |
| videolan vlc media player | = 0.8.6c | No fix listed |
| videolan vlc media player | = 0.8.6d | No fix listed |
| videolan vlc media player | = 0.8.6e | No fix listed |
| videolan vlc media player | = 0.8.6f | No fix listed |
| videolan vlc media player | = 0.8.6g | No fix listed |
| videolan vlc media player | = 0.8.6h | No fix listed |
| videolan vlc media player | = 0.8.6i | No fix listed |
| videolan vlc media player | = 0.9.0 | No fix listed |
| videolan vlc media player | = 0.9.1 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| videolan vlc media player | = 0.9.5 | No fix listed |
| videolan vlc media player | = 0.9.6 | No fix listed |
| videolan vlc media player | = 0.9.8a | No fix listed |
| videolan vlc media player | = 0.9.9 | No fix listed |
| videolan vlc media player | = 0.9.9a | No fix listed |
| videolan vlc media player | = 0.9.10 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 1.0.0 | No fix listed |
| videolan vlc media player | = 1.0.1 | No fix listed |
| videolan vlc media player | = 1.0.2 | No fix listed |
| videolan vlc media player | = 1.0.3 | No fix listed |
| videolan vlc media player | = 1.0.4 | No fix listed |
| videolan vlc media player | = 1.0.5 | No fix listed |
| videolan vlc media player | = 1.0.6 | No fix listed |
| videolan vlc media player | = 1.1.0 | No fix listed |
| videolan vlc media player | = 1.1.1 | No fix listed |
| videolan vlc media player | = 1.1.2 | No fix listed |
| videolan vlc media player | = 1.1.3 | No fix listed |
| videolan vlc media player | = 1.1.4 | No fix listed |
| videolan vlc media player | = 1.1.4.1 | No fix listed |
| videolan vlc media player | = 1.1.5 | No fix listed |
| videolan vlc media player | = 1.1.6 | No fix listed |
| videolan vlc media player | = 1.1.7 | No fix listed |
| videolan vlc media player | = 1.1.8 | No fix listed |
| videolan vlc media player | = 1.1.9 | No fix listed |
References
- Debian Security Tracker CVE-2011-2194 vendor-advisory
- 44892 third-party-advisory vendor-advisory
- DSA-2257 vendor-advisory
- 48171 vdb-entry
- www.videolan.org vendor-advisory
- oval:org.mitre.oval:def:14774 signature vdb-entry