Test ID:	1.3.6.1.4.1.25623.1.0.69562
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2218-1)
Summary:	The remote host is missing an update for the Debian 'vlc' package(s) announced via the DSA-2218-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'vlc' package(s) announced via the DSA-2218-1 advisory. Vulnerability Insight: Aliz Hammond discovered that the MP4 decoder plugin of VLC, a multimedia player and streamer, is vulnerable to a heap-based buffer overflow. This has been introduced by a wrong data type being used for a size calculation. An attacker could use this flaw to trick a victim into opening a specially crafted MP4 file and possibly execute arbitrary code or crash the media player. The oldstable distribution (lenny) is not affected by this problem. For the stable distribution (squeeze), this problem has been fixed in version 1.1.3-1squeeze5. For the testing distribution (wheezy), this problem will be fixed soon. For the unstable distribution (sid), this problem has been fixed in version 1.1.8-3. We recommend that you upgrade your vlc packages. Affected Software/OS: 'vlc' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1684 BugTraq ID: 47293 http://www.securityfocus.com/bid/47293 Debian Security Information: DSA-2218 (Google Search) http://www.debian.org/security/2011/dsa-2218 http://openwall.com/lists/oss-security/2011/04/11/17 http://openwall.com/lists/oss-security/2011/04/13/14 http://openwall.com/lists/oss-security/2011/04/13/17 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14741 http://securitytracker.com/id?1025373 http://secunia.com/advisories/43890 http://secunia.com/advisories/44022 http://www.vupen.com/english/advisories/2011/0916 http://www.vupen.com/english/advisories/2011/0954 XForce ISS Database: vlcmediaplayer-mp4readboxskcr-bo(66664) https://exchange.xforce.ibmcloud.com/vulnerabilities/66664
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.