CVE-2010-3276: Buffer Overflow
Published Mar 28, 2011
·Updated
libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.
Affected Software
70 affected components
Videolan VLC Media Player<=1.1.7
Videolan VLC Media Player=0.1.99b
Videolan VLC Media Player=0.1.99e
Videolan VLC Media Player=0.1.99f
Videolan VLC Media Player=0.1.99g
Videolan VLC Media Player=0.1.99h
Videolan VLC Media Player=0.1.99i
Videolan VLC Media Player=0.2.0
Videolan VLC Media Player=0.2.60
Videolan VLC Media Player=0.2.61
Videolan VLC Media Player=0.2.62
Videolan VLC Media Player=0.2.63
Videolan VLC Media Player=0.2.70
Videolan VLC Media Player=0.2.71
Videolan VLC Media Player=0.2.72
Videolan VLC Media Player=0.2.73
Videolan VLC Media Player=0.2.80
Videolan VLC Media Player=0.2.81
Videolan VLC Media Player=0.2.82
Videolan VLC Media Player=0.2.83
Videolan VLC Media Player=0.2.90
Videolan VLC Media Player=0.2.91
Videolan VLC Media Player=0.2.92
Videolan VLC Media Player=0.3.0
Videolan VLC Media Player=0.3.1
Videolan VLC Media Player=0.4.0
Videolan VLC Media Player=0.4.1
Videolan VLC Media Player=0.4.2
Videolan VLC Media Player=0.4.3
Videolan VLC Media Player=0.4.4
Videolan VLC Media Player=0.4.5
Videolan VLC Media Player=0.4.6
Videolan VLC Media Player=0.5.0
Videolan VLC Media Player=0.5.1
Videolan VLC Media Player=0.5.2
Videolan VLC Media Player=0.5.3
Videolan VLC Media Player=0.6.0
Videolan VLC Media Player=0.6.1
Videolan VLC Media Player=0.6.2
Videolan VLC Media Player=0.7.0
Videolan VLC Media Player=0.7.2
Videolan VLC Media Player=0.8.0
Videolan VLC Media Player=0.8.1
Videolan VLC Media Player=0.8.2
Videolan VLC Media Player=0.8.4
Videolan VLC Media Player=0.8.5
Videolan VLC Media Player=0.8.6
Videolan VLC Media Player=0.9.2
Videolan VLC Media Player=0.9.3
Videolan VLC Media Player=0.9.4
Videolan VLC Media Player=0.9.5
Videolan VLC Media Player=0.9.6
Videolan VLC Media Player=0.9.8a
Videolan VLC Media Player=0.9.9
Videolan VLC Media Player=0.9.10
Videolan VLC Media Player=1.0.0
Videolan VLC Media Player=1.0.1
Videolan VLC Media Player=1.0.2
Videolan VLC Media Player=1.0.3
Videolan VLC Media Player=1.0.4
Videolan VLC Media Player=1.0.5
Videolan VLC Media Player=1.0.6
Videolan VLC Media Player=1.1.0
Videolan VLC Media Player=1.1.1
Videolan VLC Media Player=1.1.2
Videolan VLC Media Player=1.1.3
Videolan VLC Media Player=1.1.4
Videolan VLC Media Player=1.1.5
Videolan VLC Media Player=1.1.6
Videolan VLC Media Player=1.1.6.1
Remediation
Patch Available
Event History
Mar 28, 2011
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3276?
CVE-2010-3276 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2010-3276?
To fix CVE-2010-3276, users should upgrade VLC Media Player to version 1.1.8 or later.
3
What exploitation techniques are associated with CVE-2010-3276?
CVE-2010-3276 can be exploited through specially crafted NSV files which trigger arbitrary code execution.
4
Which versions of VLC are affected by CVE-2010-3276?
Vulnerable versions of VLC Media Player include all versions before 1.1.8.
5
How can I determine if my VLC Media Player is affected by CVE-2010-3276?
To determine if your VLC is affected by CVE-2010-3276, check the installed version against the vulnerable versions listed.