CVE-2010-2937: Input Validation
Published Aug 20, 2010
·Updated
The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.
Affected Software
22 affected components
Videolan VLC Media Player=0.9.0
Videolan VLC Media Player=0.9.1
Videolan VLC Media Player=0.9.2
Videolan VLC Media Player=0.9.3
Videolan VLC Media Player=0.9.4
Videolan VLC Media Player=0.9.5
Videolan VLC Media Player=0.9.6
Videolan VLC Media Player=0.9.7
Videolan VLC Media Player=0.9.8a
Videolan VLC Media Player=0.9.9
Videolan VLC Media Player=0.9.9a
Videolan VLC Media Player=0.9.10
Videolan VLC Media Player=1.0.0
Videolan VLC Media Player=1.0.1
Videolan VLC Media Player=1.0.2
Videolan VLC Media Player=1.0.3
Videolan VLC Media Player=1.0.4
Videolan VLC Media Player=1.0.5
Videolan VLC Media Player=1.0.6
Videolan VLC Media Player=1.1.0
Videolan VLC Media Player=1.1.1
Videolan VLC Media Player=1.1.2
Event History
Aug 20, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2937?
The severity of CVE-2010-2937 is typically classified as moderate due to the potential for application crashes.
2
How do I fix CVE-2010-2937?
To fix CVE-2010-2937, update your VLC media player to version 1.1.3 or later.
3
Which versions of VLC media player are affected by CVE-2010-2937?
CVE-2010-2937 affects VLC media player versions from 0.9.0 through 1.1.2.
4
What type of attack does CVE-2010-2937 enable?
CVE-2010-2937 allows remote attackers to perform denial of service attacks by crashing the application.
5
What component of VLC media player is impacted by CVE-2010-2937?
CVE-2010-2937 impacts the ReadMetaFromId3v2 function in the TagLib plugin.