Test ID:	1.3.6.1.4.1.25623.1.0.812504
Category:	Denial of Service
Title:	VLC Media Player 'MP4 Demux Module' DoS Vulnerability - Windows
Summary:	VLC media player is prone to a denial of service vulnerability.
Description:	Summary: VLC media player is prone to a denial of service vulnerability. Vulnerability Insight: The flaw is due to a type conversion error in 'modules/demux/mp4/libmp4.c' in the MP4 demux module leading to an invalid free, because the type of a box may be changed between a read operation and a free operation. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial-of-service condition. Given the nature of this issue, attackers may also be able to execute arbitrary code, but this has not been confirmed. Affected Software/OS: VideoLAN VLC media player 2.2.8 and prior on Windows. Solution: Update to version 3.0.1 or later CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17670 BugTraq ID: 102214 http://www.securityfocus.com/bid/102214 Debian Security Information: DSA-4203 (Google Search) https://www.debian.org/security/2018/dsa-4203 http://openwall.com/lists/oss-security/2017/12/15/1 http://www.securitytracker.com/id/1040938
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.