Lucene search
MitreCVE-2012-1775HistoryMar 19, 2012 - 4:55 p.m.
CVE-2012-1775
2012-03-1916:55:01
CWE-119
mitre
web.nvd.nist.gov
110
cve
2012
1775
videolan
vlc
media player
buffer overflow
mms
stream
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.965
Percentile
99.6%
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
Affected configurations
Node
videolanvlc_media_playerRange≤2.0.0
ORvideolanvlc_media_playerMatch0.1.99a
ORvideolanvlc_media_playerMatch0.1.99b
ORvideolanvlc_media_playerMatch0.1.99c
ORvideolanvlc_media_playerMatch0.1.99d
ORvideolanvlc_media_playerMatch0.1.99e
ORvideolanvlc_media_playerMatch0.1.99f
ORvideolanvlc_media_playerMatch0.1.99g
ORvideolanvlc_media_playerMatch0.1.99h
ORvideolanvlc_media_playerMatch0.1.99i
ORvideolanvlc_media_playerMatch0.2.0
ORvideolanvlc_media_playerMatch0.2.50
ORvideolanvlc_media_playerMatch0.2.60
ORvideolanvlc_media_playerMatch0.2.61
ORvideolanvlc_media_playerMatch0.2.62
ORvideolanvlc_media_playerMatch0.2.63
ORvideolanvlc_media_playerMatch0.2.70
ORvideolanvlc_media_playerMatch0.2.71
ORvideolanvlc_media_playerMatch0.2.72
ORvideolanvlc_media_playerMatch0.2.73
ORvideolanvlc_media_playerMatch0.2.80
ORvideolanvlc_media_playerMatch0.2.81
ORvideolanvlc_media_playerMatch0.2.82
ORvideolanvlc_media_playerMatch0.2.83
ORvideolanvlc_media_playerMatch0.2.90
ORvideolanvlc_media_playerMatch0.2.91
ORvideolanvlc_media_playerMatch0.2.92
ORvideolanvlc_media_playerMatch0.3.0
ORvideolanvlc_media_playerMatch0.3.1
ORvideolanvlc_media_playerMatch0.4.0
ORvideolanvlc_media_playerMatch0.4.1
ORvideolanvlc_media_playerMatch0.4.2
ORvideolanvlc_media_playerMatch0.4.3
ORvideolanvlc_media_playerMatch0.4.3-ac3
ORvideolanvlc_media_playerMatch0.4.4
ORvideolanvlc_media_playerMatch0.4.5
ORvideolanvlc_media_playerMatch0.4.6
ORvideolanvlc_media_playerMatch0.5.0
ORvideolanvlc_media_playerMatch0.5.1
ORvideolanvlc_media_playerMatch0.5.2
ORvideolanvlc_media_playerMatch0.5.3
ORvideolanvlc_media_playerMatch0.6.0
ORvideolanvlc_media_playerMatch0.6.1
ORvideolanvlc_media_playerMatch0.6.2
ORvideolanvlc_media_playerMatch0.7.0
ORvideolanvlc_media_playerMatch0.7.1
ORvideolanvlc_media_playerMatch0.7.1a
ORvideolanvlc_media_playerMatch0.7.2
ORvideolanvlc_media_playerMatch0.7.2test2
ORvideolanvlc_media_playerMatch0.7.2test3
ORvideolanvlc_media_playerMatch0.8.0
ORvideolanvlc_media_playerMatch0.8.1
ORvideolanvlc_media_playerMatch0.8.2
ORvideolanvlc_media_playerMatch0.8.4
ORvideolanvlc_media_playerMatch0.8.4test2
ORvideolanvlc_media_playerMatch0.8.4a
ORvideolanvlc_media_playerMatch0.8.5
ORvideolanvlc_media_playerMatch0.8.5test3
ORvideolanvlc_media_playerMatch0.8.5test4
ORvideolanvlc_media_playerMatch0.8.6
ORvideolanvlc_media_playerMatch0.8.6a
ORvideolanvlc_media_playerMatch0.8.6b
ORvideolanvlc_media_playerMatch0.8.6c
ORvideolanvlc_media_playerMatch0.8.6d
ORvideolanvlc_media_playerMatch0.8.6e
ORvideolanvlc_media_playerMatch0.8.6f
ORvideolanvlc_media_playerMatch0.8.6g
ORvideolanvlc_media_playerMatch0.8.6h
ORvideolanvlc_media_playerMatch0.8.6i
ORvideolanvlc_media_playerMatch0.8.1337
ORvideolanvlc_media_playerMatch0.9
ORvideolanvlc_media_playerMatch0.9.0
ORvideolanvlc_media_playerMatch0.9.1
ORvideolanvlc_media_playerMatch0.9.2
ORvideolanvlc_media_playerMatch0.9.3
ORvideolanvlc_media_playerMatch0.9.4
ORvideolanvlc_media_playerMatch0.9.5
ORvideolanvlc_media_playerMatch0.9.6
ORvideolanvlc_media_playerMatch0.9.7
ORvideolanvlc_media_playerMatch0.9.8
ORvideolanvlc_media_playerMatch0.9.8a
ORvideolanvlc_media_playerMatch0.9.9
ORvideolanvlc_media_playerMatch0.9.9a
ORvideolanvlc_media_playerMatch0.9.10
ORvideolanvlc_media_playerMatch1.0.0
ORvideolanvlc_media_playerMatch1.0.1
ORvideolanvlc_media_playerMatch1.0.2
ORvideolanvlc_media_playerMatch1.0.3
ORvideolanvlc_media_playerMatch1.0.4
ORvideolanvlc_media_playerMatch1.0.5
ORvideolanvlc_media_playerMatch1.0.6
ORvideolanvlc_media_playerMatch1.1.0
ORvideolanvlc_media_playerMatch1.1.1
ORvideolanvlc_media_playerMatch1.1.2
ORvideolanvlc_media_playerMatch1.1.3
ORvideolanvlc_media_playerMatch1.1.4
ORvideolanvlc_media_playerMatch1.1.4.1
ORvideolanvlc_media_playerMatch1.1.5
ORvideolanvlc_media_playerMatch1.1.6
ORvideolanvlc_media_playerMatch1.1.6.1
ORvideolanvlc_media_playerMatch1.1.7
ORvideolanvlc_media_playerMatch1.1.8
ORvideolanvlc_media_playerMatch1.1.9
ORvideolanvlc_media_playerMatch1.1.10
ORvideolanvlc_media_playerMatch1.1.10.1
ORvideolanvlc_media_playerMatch1.1.11
ORvideolanvlc_media_playerMatch1.1.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| videolan | vlc_media_player | 1.1.2 | cpe:/a:videolan:vlc_media_player:1.1.2::: |
| videolan | vlc_media_player | 1.1.7 | cpe:/a:videolan:vlc_media_player:1.1.7::: |
| videolan | vlc_media_player | 0.5.1 | cpe:/a:videolan:vlc_media_player:0.5.1::: |
| videolan | vlc_media_player | 1.1.5 | cpe:/a:videolan:vlc_media_player:1.1.5::: |
| videolan | vlc_media_player | 0.6.0 | cpe:/a:videolan:vlc_media_player:0.6.0::: |
| videolan | vlc_media_player | 0.9.6 | cpe:/a:videolan:vlc_media_player:0.9.6::: |
| videolan | vlc_media_player | 0.7.2 | cpe:/a:videolan:vlc_media_player:0.7.2:test2:: |
| videolan | vlc_media_player | 0.4.1 | cpe:/a:videolan:vlc_media_player:0.4.1::: |
| videolan | vlc_media_player | 1.1.3 | cpe:/a:videolan:vlc_media_player:1.1.3::: |
| videolan | vlc_media_player | 0.7.2 | cpe:/a:videolan:vlc_media_player:0.7.2::: |
References
git.videolan.org/?p=vlc/vlc-2.0.git%3Ba=commit%3Bh=11a95cce96fffdbaba1be6034d7b42721667821c
www.exploit-db.com/exploits/18825
www.securityfocus.com/bid/52550
www.securityfocus.com/bid/53391
www.videolan.org/security/sa1201.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14820
Related
seebug
seebug
VLC Media Player MMS流栈缓冲区溢出漏洞
2012-05-09 00:00:00
ubuntucve
ubuntucve
CVE-2012-1775
2012-03-19 00:00:00
saint
saint
VideoLAN VLC Media Player MMS URI Stack Overflow
2012-05-09 00:00:00
VideoLAN VLC Media Player MMS URI Stack Overflow
2012-05-09 00:00:00
VideoLAN VLC Media Player MMS URI Stack Overflow
2012-05-09 00:00:00
nvd
nvd
CVE-2012-1775
2012-03-19 16:55:01
checkpoint_advisories
checkpoint_advisories
debiancve
debiancve
CVE-2012-1775
2012-03-19 16:55:01
packetstorm
packetstorm
VLC MMS Stream Handling Buffer Overflow
2012-05-03 00:00:00
metasploit
metasploit
VLC MMS Stream Handling Buffer Overflow
2012-05-01 14:39:30
prion
prion
Stack overflow
2012-03-19 16:55:00
cvelist
cvelist
CVE-2012-1775
2012-03-19 16:00:00
exploitdb
exploitdb
openvas
openvas
FreeBSD Ports: vlc
2012-09-15 00:00:00
VLC Media Player Multiple Vulnerabilities (Mar 2012) - Linux
2012-03-21 00:00:00
VLC Media Player Multiple Vulnerabilities - Mar 12 (Windows)
2012-03-21 00:00:00
nessus
nessus
VLC Media Player < 2.0.1 Multiple RCE
2012-03-21 00:00:00
VLC Media Player < 2.0.1 Multiple Code Execution Vulnerabilities
2012-03-21 00:00:00
VLC Media Player < 2.0.1 Multiple Vulnerabilities
2012-03-21 00:00:00
freebsd
freebsd
vlc -- arbitrary code execution in Real RTSP and MMS support
2012-03-12 00:00:00
gentoo
gentoo
VLC: Multiple vulnerabilities
2014-11-05 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.965
Percentile
99.6%
Related for CVE-2012-1775