First published: Fri Jun 24 2011(Updated: )
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
VideoLAN VLC media player | =0.8.6b | |
VideoLAN VLC media player | =1.1.3 | |
VideoLAN VLC media player | =0.8.6g | |
VideoLAN VLC media player | =1.1.7 | |
VideoLAN VLC media player | =1.0.3 | |
VideoLAN VLC media player | =0.9.0 | |
VideoLAN VLC media player | =0.9.4 | |
VideoLAN VLC media player | =1.1.4 | |
VideoLAN VLC media player | =0.8.5 | |
VideoLAN VLC media player | =0.9.9a | |
VideoLAN VLC media player | =0.8.6h | |
VideoLAN VLC media player | =0.9.10 | |
VideoLAN VLC media player | =1.1.5 | |
VideoLAN VLC media player | =0.8.6 | |
VideoLAN VLC media player | =0.8.6c | |
VideoLAN VLC media player | =0.8.6i | |
VideoLAN VLC media player | =0.9.1 | |
VideoLAN VLC media player | =0.9.8a | |
VideoLAN VLC media player | =1.0.1 | |
VideoLAN VLC media player | =1.1.9 | |
VideoLAN VLC media player | =0.8.6a | |
VideoLAN VLC media player | =1.1.2 | |
VideoLAN VLC media player | =1.0.0 | |
VideoLAN VLC media player | =0.9.5 | |
VideoLAN VLC media player | =1.0.4 | |
VideoLAN VLC media player | =1.1.0 | |
VideoLAN VLC media player | =0.8.6f | |
VideoLAN VLC media player | =1.0.2 | |
VideoLAN VLC media player | =0.9.2 | |
VideoLAN VLC media player | =1.1.6 | |
VideoLAN VLC media player | =1.1.8 | |
VideoLAN VLC media player | =0.9.9 | |
VideoLAN VLC media player | =0.8.6e | |
VideoLAN VLC media player | =0.8.6d | |
VideoLAN VLC media player | =1.1.4.1 | |
VideoLAN VLC media player | =1.1.1 | |
VideoLAN VLC media player | =1.0.6 | |
VideoLAN VLC media player | =1.0.5 | |
VideoLAN VLC media player | =0.9.3 | |
VideoLAN VLC media player | =0.9.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-2194 is considered a high-severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
To fix CVE-2011-2194, you should update to a patched version of VideoLAN VLC media player that addresses this vulnerability.
CVE-2011-2194 affects VideoLAN VLC media player versions 0.8.5 through 1.1.9.
CVE-2011-2194 is an integer overflow vulnerability in the XSPF playlist parser.
Yes, CVE-2011-2194 can be remotely exploited, leading to a denial of service or arbitrary code execution.