Test ID:	1.3.6.1.4.1.25623.1.0.800445
Category:	Buffer overflow
Title:	VLC Media Player ASS File Buffer Overflow Vulnerability - Linux
Summary:	VLC Media Player is prone to Stack-Based Buffer Overflow Vulnerability.
Description:	Summary: VLC Media Player is prone to Stack-Based Buffer Overflow Vulnerability. Vulnerability Insight: The flaw exists due to stack-based buffer overflow error in Aegisub Advanced SubStation ('.ass') file handler that fails to perform adequate boundary checks on user-supplied input. Vulnerability Impact: Successful exploitation allows attackers to execute arbitrary code, and can cause application crash. Affected Software/OS: VLC Media Player version 0.8.6 on Linux. Solution: Upgrade to VLC Media Player version 1.0.5 or later CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0364 BugTraq ID: 37832 http://www.securityfocus.com/bid/37832 http://www.exploit-db.com/exploits/11174 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14342 XForce ISS Database: vlcmediaplayer-asas-bo(55717) https://exchange.xforce.ibmcloud.com/vulnerabilities/55717
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.