CVE-2011-0021: Buffer Overflow
Published Jan 25, 2011
·Updated
Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted CDG video.
Affected Software
67 affected components
Videolan VLC Media Player<=1.1.5
Videolan VLC Media Player=0.1.99b
Videolan VLC Media Player=0.1.99e
Videolan VLC Media Player=0.1.99f
Videolan VLC Media Player=0.1.99g
Videolan VLC Media Player=0.1.99h
Videolan VLC Media Player=0.1.99i
Videolan VLC Media Player=0.2.0
Videolan VLC Media Player=0.2.60
Videolan VLC Media Player=0.2.61
Videolan VLC Media Player=0.2.62
Videolan VLC Media Player=0.2.63
Videolan VLC Media Player=0.2.70
Videolan VLC Media Player=0.2.71
Videolan VLC Media Player=0.2.72
Videolan VLC Media Player=0.2.73
Videolan VLC Media Player=0.2.80
Videolan VLC Media Player=0.2.81
Videolan VLC Media Player=0.2.82
Videolan VLC Media Player=0.2.83
Videolan VLC Media Player=0.2.90
Videolan VLC Media Player=0.2.91
Videolan VLC Media Player=0.2.92
Videolan VLC Media Player=0.3.0
Videolan VLC Media Player=0.3.1
Videolan VLC Media Player=0.4.0
Videolan VLC Media Player=0.4.1
Videolan VLC Media Player=0.4.2
Videolan VLC Media Player=0.4.3
Videolan VLC Media Player=0.4.4
Videolan VLC Media Player=0.4.5
Videolan VLC Media Player=0.4.6
Videolan VLC Media Player=0.5.0
Videolan VLC Media Player=0.5.1
Videolan VLC Media Player=0.5.2
Videolan VLC Media Player=0.5.3
Videolan VLC Media Player=0.6.0
Videolan VLC Media Player=0.6.1
Videolan VLC Media Player=0.6.2
Videolan VLC Media Player=0.7.0
Videolan VLC Media Player=0.7.2
Videolan VLC Media Player=0.8.0
Videolan VLC Media Player=0.8.1
Videolan VLC Media Player=0.8.2
Videolan VLC Media Player=0.8.4
Videolan VLC Media Player=0.8.5
Videolan VLC Media Player=0.8.6
Videolan VLC Media Player=0.9.2
Videolan VLC Media Player=0.9.3
Videolan VLC Media Player=0.9.4
Videolan VLC Media Player=0.9.5
Videolan VLC Media Player=0.9.6
Videolan VLC Media Player=0.9.8a
Videolan VLC Media Player=0.9.9
Videolan VLC Media Player=0.9.10
Videolan VLC Media Player=1.0.0
Videolan VLC Media Player=1.0.1
Videolan VLC Media Player=1.0.2
Videolan VLC Media Player=1.0.3
Videolan VLC Media Player=1.0.4
Videolan VLC Media Player=1.0.5
Videolan VLC Media Player=1.0.6
Videolan VLC Media Player=1.1.0
Videolan VLC Media Player=1.1.1
Videolan VLC Media Player=1.1.2
Videolan VLC Media Player=1.1.3
Videolan VLC Media Player=1.1.4
Remediation
Patch Available
Event History
Jan 25, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0021?
CVE-2011-0021 is classified as a medium severity vulnerability due to its potential for denial of service and arbitrary code execution.
2
How do I fix CVE-2011-0021?
To fix CVE-2011-0021, you should update VLC Media Player to version 1.1.6 or later.
3
What types of vulnerabilities are present in CVE-2011-0021?
CVE-2011-0021 contains multiple heap-based buffer overflow vulnerabilities.
4
Can CVE-2011-0021 be exploited remotely?
Yes, CVE-2011-0021 can be exploited remotely by sending a crafted CDG video file.
5
What impact does CVE-2011-0021 have on affected systems?
The impact of CVE-2011-0021 includes application crashes and the possibility of arbitrary code execution.