CVE ID:	CVE-2011-1684
Description:	Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.
Test IDs:	1.3.6.1.4.1.25623.1.0.801784   1.3.6.1.4.1.25623.1.0.801783
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1684 BugTraq ID: 47293 http://www.securityfocus.com/bid/47293 Debian Security Information: DSA-2218 (Google Search) http://www.debian.org/security/2011/dsa-2218 http://openwall.com/lists/oss-security/2011/04/11/17 http://openwall.com/lists/oss-security/2011/04/13/14 http://openwall.com/lists/oss-security/2011/04/13/17 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14741 http://securitytracker.com/id?1025373 http://secunia.com/advisories/43890 http://secunia.com/advisories/44022 http://www.vupen.com/english/advisories/2011/0916 http://www.vupen.com/english/advisories/2011/0954 XForce ISS Database: vlcmediaplayer-mp4readboxskcr-bo(66664) https://exchange.xforce.ibmcloud.com/vulnerabilities/66664