Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.902339
Category:General
Title:VLC Media Player '.mkv' Code Execution Vulnerability (Linux)
Summary:The host is installed with VLC Media Player and is prone to; arbitrary code execution vulnerability.
Description:Summary:
The host is installed with VLC Media Player and is prone to
arbitrary code execution vulnerability.

Vulnerability Insight:
The flaw is due to an input validation error within the 'MKV_IS_ID'
macro in 'modules/demux/mkv/mkv.hpp' of the MKV demuxer, when parsing the
MKV file.

Vulnerability Impact:
Successful exploitation could allow attackers to execute arbitrary code by
tricking a user into opening a specially crafted MKV file.

Affected Software/OS:
VLC media player version 1.1.6.1 and prior on Linux

Solution:
Upgrade to the VLC media player version 1.1.7 or later.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: BugTraq ID: 46060
Common Vulnerability Exposure (CVE) ID: CVE-2011-0531
http://www.securityfocus.com/bid/46060
Debian Security Information: DSA-2159 (Google Search)
http://www.debian.org/security/2011/dsa-2159
http://www.openwall.com/lists/oss-security/2011/01/31/4
http://www.openwall.com/lists/oss-security/2011/01/31/8
http://osvdb.org/70698
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12415
http://www.securitytracker.com/id?1025018
http://secunia.com/advisories/43131
http://secunia.com/advisories/43242
http://www.vupen.com/english/advisories/2011/0363
XForce ISS Database: vlc-mkv-code-execution(65045)
https://exchange.xforce.ibmcloud.com/vulnerabilities/65045
CopyrightCopyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.