Denial of Service : VLC Media Player Buffer Overflow Vulnerability (Oct 2016)

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.807370

Category: Denial of Service

Title: VLC Media Player Buffer Overflow Vulnerability (Oct 2016)

Summary: VLC media player is prone to a buffer overflow vulnerability.

Description: Summary:
VLC media player is prone to a buffer overflow vulnerability.

Vulnerability Insight:
The flaw is due to an insufficient
validation of user supplied input while opening a file in player.

Vulnerability Impact:
Successful exploitation will allow local
attackers to cause denial of service condition.

Affected Software/OS:
VideoLAN VLC media player 2.2.3 on Windows.

Solution:
Update to version 2.2.4.

CVSS Score:
4.4

CVSS Vector:
AV:L/AC:M/Au:S/C:N/I:N/A:C

Copyright Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.807370
Category:	Denial of Service
Title:	VLC Media Player Buffer Overflow Vulnerability (Oct 2016)
Summary:	VLC media player is prone to a buffer overflow vulnerability.
Description:	Summary: VLC media player is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to an insufficient validation of user supplied input while opening a file in player. Vulnerability Impact: Successful exploitation will allow local attackers to cause denial of service condition. Affected Software/OS: VideoLAN VLC media player 2.2.3 on Windows. Solution: Update to version 2.2.4. CVSS Score: 4.4 CVSS Vector: AV:L/AC:M/Au:S/C:N/I:N/A:C
Copyright	Copyright (C) 2016 Greenbone AG