VLC media player security vulnerabilities
Published:		25.03.2011
Source:		BUGTRAQ
SecurityVulns ID:		11535
Type:		remote
Level:		5/10
Description:		Buffer overflow on .AMV and .NSV parsing.

CVE:		CVE-2010-3276 (libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.)
		CVE-2010-3275 (libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability.")

Original document

CORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2011-0208: VLC Vulnerabilities handling .AMV and .NSV files (25.03.2011)

Discuss:

Read or add your comments to this news (0 comments)