CVE-2010-3275: Buffer Overflow
Published Mar 28, 2011
·Updated
libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."
Affected Software
70 affected components
Videolan VLC Media Player=1.1.3
Videolan VLC Media Player=0.7.2
Videolan VLC Media Player=0.5.0
Videolan VLC Media Player=0.2.62
Videolan VLC Media Player=0.4.0
Videolan VLC Media Player=0.1.99e
Videolan VLC Media Player=1.0.3
Videolan VLC Media Player=0.8.0
Videolan VLC Media Player=0.1.99g
Videolan VLC Media Player=0.2.70
Videolan VLC Media Player=0.4.3
Videolan VLC Media Player=0.9.4
Videolan VLC Media Player<=1.1.7
Videolan VLC Media Player=1.1.4
Videolan VLC Media Player=0.8.5
Videolan VLC Media Player=0.6.2
Videolan VLC Media Player=0.2.61
Videolan VLC Media Player=0.9.10
Videolan VLC Media Player=0.2.71
Videolan VLC Media Player=1.1.5
Videolan VLC Media Player=0.2.83
Videolan VLC Media Player=0.8.4
Videolan VLC Media Player=0.2.72
Videolan VLC Media Player=0.8.6
Videolan VLC Media Player=0.2.0
Videolan VLC Media Player=0.3.0
Videolan VLC Media Player=0.4.4
Videolan VLC Media Player=0.2.80
Videolan VLC Media Player=0.5.2
Videolan VLC Media Player=0.7.0
Videolan VLC Media Player=1.1.6.1
Videolan VLC Media Player=0.9.8a
Videolan VLC Media Player=0.2.81
Videolan VLC Media Player=1.0.1
Videolan VLC Media Player=0.5.3
Videolan VLC Media Player=0.2.60
Videolan VLC Media Player=1.1.2
Videolan VLC Media Player=1.0.0
Videolan VLC Media Player=0.4.6
Videolan VLC Media Player=0.9.5
Videolan VLC Media Player=0.6.0
Videolan VLC Media Player=0.2.73
Videolan VLC Media Player=1.0.4
Videolan VLC Media Player=0.2.82
Videolan VLC Media Player=1.1.0
Videolan VLC Media Player=0.1.99h
Videolan VLC Media Player=0.4.1
Videolan VLC Media Player=0.2.92
Videolan VLC Media Player=0.2.91
Videolan VLC Media Player=0.5.1
Videolan VLC Media Player=0.4.2
Videolan VLC Media Player=1.0.2
Videolan VLC Media Player=0.9.2
Videolan VLC Media Player=0.1.99b
Videolan VLC Media Player=0.6.1
Videolan VLC Media Player=0.1.99f
Videolan VLC Media Player=0.1.99i
Videolan VLC Media Player=1.1.6
Videolan VLC Media Player=0.8.1
Videolan VLC Media Player=0.9.9
Videolan VLC Media Player=1.1.1
Videolan VLC Media Player=0.2.90
Videolan VLC Media Player=0.8.2
Videolan VLC Media Player=0.4.5
Videolan VLC Media Player=1.0.6
Videolan VLC Media Player=1.0.5
Videolan VLC Media Player=0.9.3
Videolan VLC Media Player=0.2.63
Videolan VLC Media Player=0.9.6
Videolan VLC Media Player=0.3.1
Remediation
Patch Available
Event History
Mar 28, 2011
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3275?
CVE-2010-3275 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code on affected systems.
2
How do I fix CVE-2010-3275?
To fix CVE-2010-3275, upgrade VLC Media Player to version 1.1.8 or later.
3
Which versions of VLC Media Player are affected by CVE-2010-3275?
Vulnerable versions of VLC Media Player include all versions prior to 1.1.8.
4
What type of vulnerability is CVE-2010-3275?
CVE-2010-3275 is categorized as a dangling pointer vulnerability.
5
Can CVE-2010-3275 be exploited through a specific file type?
Yes, CVE-2010-3275 can be exploited through a crafted width in an AMV file.