CVE-2012-0904 VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.
MediumCVSS 4.3
EPSS 4.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
VLC media player 1.1.11 allows remote attackers to cause a denial of service (crash) via a long string in an amr file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 1.1.11 | No fix listed |
References
- 20120104 VLC media player v1.1.11 (.amr) Local Crash PoC exploit mailing-list
- 18309 exploit
- 51255 exploit vdb-entry
- vlcmediaplayer-amr-dos(72085) vdb-entry
- oval:org.mitre.oval:def:14327 signature vdb-entry
- Debian Security Tracker CVE-2012-0904 vendor-advisory