CVE-2011-2194: Buffer Overflow

Published Jun 24, 2011

Updated

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.

Affected Software

40 affected components

Videolan VLC Media Player=0.8.6b

Videolan VLC Media Player=1.1.3

Videolan VLC Media Player=0.8.6g

Videolan VLC Media Player=1.1.7

Videolan VLC Media Player=1.0.3

Videolan VLC Media Player=0.9.0

Videolan VLC Media Player=0.9.4

Videolan VLC Media Player=1.1.4

Videolan VLC Media Player=0.8.5

Videolan VLC Media Player=0.9.9a

Videolan VLC Media Player=0.8.6h

Videolan VLC Media Player=0.9.10

Videolan VLC Media Player=1.1.5

Videolan VLC Media Player=0.8.6

Videolan VLC Media Player=0.8.6c

Videolan VLC Media Player=0.8.6i

Videolan VLC Media Player=0.9.1

Videolan VLC Media Player=0.9.8a

Videolan VLC Media Player=1.0.1

Videolan VLC Media Player=1.1.9

Videolan VLC Media Player=0.8.6a

Videolan VLC Media Player=1.1.2

Videolan VLC Media Player=1.0.0

Videolan VLC Media Player=0.9.5

Videolan VLC Media Player=1.0.4

Videolan VLC Media Player=1.1.0

Videolan VLC Media Player=0.8.6f

Videolan VLC Media Player=1.0.2

Videolan VLC Media Player=0.9.2

Videolan VLC Media Player=1.1.6

Videolan VLC Media Player=1.1.8

Videolan VLC Media Player=0.9.9

Videolan VLC Media Player=0.8.6e

Videolan VLC Media Player=0.8.6d

Videolan VLC Media Player=1.1.4.1

Videolan VLC Media Player=1.1.1

Videolan VLC Media Player=1.0.6

Videolan VLC Media Player=1.0.5

Videolan VLC Media Player=0.9.3

Videolan VLC Media Player=0.9.6

Event History

Jun 24, 2011

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2194?

CVE-2011-2194 is considered a high-severity vulnerability due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2011-2194?

To fix CVE-2011-2194, you should update to a patched version of VideoLAN VLC media player that addresses this vulnerability.

Which versions of VLC are affected by CVE-2011-2194?

CVE-2011-2194 affects VideoLAN VLC media player versions 0.8.5 through 1.1.9.

What type of vulnerability is CVE-2011-2194?

CVE-2011-2194 is an integer overflow vulnerability in the XSPF playlist parser.

Can CVE-2011-2194 be remotely exploited?

Yes, CVE-2011-2194 can be remotely exploited, leading to a denial of service or arbitrary code execution.