Lucene search

K
redosRedosROS-20221207-02
HistoryDec 07, 2022 - 12:00 a.m.

ROS-20221207-02

2022-12-0700:00:00
redos.red-soft.ru
6
vlc media player
vulnerability
vnc module
remote attackers
arbitrary code
memory corruption
unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

45.2%

VLC media player vulnerability, related to a boundary error when playing a malicious URL in the
vnc module. Exploitation of the vulnerability could allow an attacker acting remotely to trick a victim into opening a specially crafted stream, causing memory corruption, and executing arbitrary behavior.
a victim to open a specially crafted thread, cause memory corruption, and execute arbitrary code on the target system.
target system

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64vlc<= 3.0.18-1UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

45.2%