Test ID:	1.3.6.1.4.1.25623.1.0.69555
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2211-1)
Summary:	The remote host is missing an update for the Debian 'vlc' package(s) announced via the DSA-2211-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'vlc' package(s) announced via the DSA-2211-1 advisory. Vulnerability Insight: Ricardo Narvaja discovered that missing input sanitising in VLC, a multimedia player and streamer, could lead to the execution of arbitrary code if a user is tricked into opening a malformed media file. This update also provides updated packages for oldstable (lenny) for vulnerabilities, which have already been addressed in Debian stable (squeeze), either during the freeze or in DSA-2159 (CVE-2010-0522, CVE-2010-1441, CVE-2010-1442 and CVE-2011-0531). For the oldstable distribution (lenny), this problem has been fixed in version 0.8.6.h-4+lenny3. For the stable distribution (squeeze), this problem has been fixed in version 1.1.3-1squeeze4. For the unstable distribution (sid), this problem has been fixed in version 1.1.8-1. We recommend that you upgrade your vlc packages. Affected Software/OS: 'vlc' package(s) on Debian 5, Debian 6. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3275 BugTraq ID: 47012 http://www.securityfocus.com/bid/47012 Bugtraq: 20110323 CORE-2011-0208: VLC Vulnerabilities handling .AMV and .NSV files (Google Search) http://www.securityfocus.com/archive/1/517150/100/0/threaded Debian Security Information: DSA-2211 (Google Search) http://www.debian.org/security/2011/dsa-2211 http://www.exploit-db.com/exploits/17048 http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files http://www.metasploit.com/modules/exploit/windows/browser/vlc_amv http://www.osvdb.org/71277 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14718 http://securitytracker.com/id?1025250 http://secunia.com/advisories/43826 http://securityreason.com/securityalert/8162 http://www.vupen.com/english/advisories/2011/0759 XForce ISS Database: vlcmediaplayer-amv-bo(66259) https://exchange.xforce.ibmcloud.com/vulnerabilities/66259 Common Vulnerability Exposure (CVE) ID: CVE-2010-3276 http://www.osvdb.org/71278 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14873 XForce ISS Database: vlcmediaplayer-nsv-bo(66260) https://exchange.xforce.ibmcloud.com/vulnerabilities/66260
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.