CVE-2012-1775: Buffer Overflow
Published Mar 19, 2012
·Updated
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
Affected Software
107 affected components
Videolan VLC Media Player<=2.0.0
Videolan VLC Media Player=0.1.99a
Videolan VLC Media Player=0.1.99b
Videolan VLC Media Player=0.1.99c
Videolan VLC Media Player=0.1.99d
Videolan VLC Media Player=0.1.99e
Videolan VLC Media Player=0.1.99f
Videolan VLC Media Player=0.1.99g
Videolan VLC Media Player=0.1.99h
Videolan VLC Media Player=0.1.99i
Videolan VLC Media Player=0.2.0
Videolan VLC Media Player=0.2.50
Videolan VLC Media Player=0.2.60
Videolan VLC Media Player=0.2.61
Videolan VLC Media Player=0.2.62
Videolan VLC Media Player=0.2.63
Videolan VLC Media Player=0.2.70
Videolan VLC Media Player=0.2.71
Videolan VLC Media Player=0.2.72
Videolan VLC Media Player=0.2.73
Videolan VLC Media Player=0.2.80
Videolan VLC Media Player=0.2.81
Videolan VLC Media Player=0.2.82
Videolan VLC Media Player=0.2.83
Videolan VLC Media Player=0.2.90
Videolan VLC Media Player=0.2.91
Videolan VLC Media Player=0.2.92
Videolan VLC Media Player=0.3.0
Videolan VLC Media Player=0.3.1
Videolan VLC Media Player=0.4.0
Videolan VLC Media Player=0.4.1
Videolan VLC Media Player=0.4.2
Videolan VLC Media Player=0.4.3
Videolan VLC Media Player=0.4.3-ac3
Videolan VLC Media Player=0.4.4
Videolan VLC Media Player=0.4.5
Videolan VLC Media Player=0.4.6
Videolan VLC Media Player=0.5.0
Videolan VLC Media Player=0.5.1
Videolan VLC Media Player=0.5.2
Videolan VLC Media Player=0.5.3
Videolan VLC Media Player=0.6.0
Videolan VLC Media Player=0.6.1
Videolan VLC Media Player=0.6.2
Videolan VLC Media Player=0.7.0
Videolan VLC Media Player=0.7.1
Videolan VLC Media Player=0.7.1a
Videolan VLC Media Player=0.7.2
Videolan VLC Media Player=0.7.2-test2
Videolan VLC Media Player=0.7.2-test3
Videolan VLC Media Player=0.8.0
Videolan VLC Media Player=0.8.1
Videolan VLC Media Player=0.8.2
Videolan VLC Media Player=0.8.4
Videolan VLC Media Player=0.8.4-test2
Videolan VLC Media Player=0.8.4a
Videolan VLC Media Player=0.8.5
Videolan VLC Media Player=0.8.5-test3
Videolan VLC Media Player=0.8.5-test4
Videolan VLC Media Player=0.8.6
Videolan VLC Media Player=0.8.6a
Videolan VLC Media Player=0.8.6b
Videolan VLC Media Player=0.8.6c
Videolan VLC Media Player=0.8.6d
Videolan VLC Media Player=0.8.6e
Videolan VLC Media Player=0.8.6f
Videolan VLC Media Player=0.8.6g
Videolan VLC Media Player=0.8.6h
Videolan VLC Media Player=0.8.6i
Videolan VLC Media Player=0.8.1337
Videolan VLC Media Player=0.9
Videolan VLC Media Player=0.9.0
Videolan VLC Media Player=0.9.1
Videolan VLC Media Player=0.9.2
Videolan VLC Media Player=0.9.3
Videolan VLC Media Player=0.9.4
Videolan VLC Media Player=0.9.5
Videolan VLC Media Player=0.9.6
Videolan VLC Media Player=0.9.7
Videolan VLC Media Player=0.9.8
Videolan VLC Media Player=0.9.8a
Videolan VLC Media Player=0.9.9
Videolan VLC Media Player=0.9.9a
Videolan VLC Media Player=0.9.10
Videolan VLC Media Player=1.0.0
Videolan VLC Media Player=1.0.1
Videolan VLC Media Player=1.0.2
Videolan VLC Media Player=1.0.3
Videolan VLC Media Player=1.0.4
Videolan VLC Media Player=1.0.5
Videolan VLC Media Player=1.0.6
Videolan VLC Media Player=1.1.0
Videolan VLC Media Player=1.1.1
Videolan VLC Media Player=1.1.2
Videolan VLC Media Player=1.1.3
Videolan VLC Media Player=1.1.4
Videolan VLC Media Player=1.1.4.1
Videolan VLC Media Player=1.1.5
Videolan VLC Media Player=1.1.6
Videolan VLC Media Player=1.1.6.1
Videolan VLC Media Player=1.1.7
Videolan VLC Media Player=1.1.8
Videolan VLC Media Player=1.1.9
Videolan VLC Media Player=1.1.10
Videolan VLC Media Player=1.1.10.1
Videolan VLC Media Player=1.1.11
Videolan VLC Media Player=1.1.13
Event History
Mar 19, 2012
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the risk associated with CVE-2012-1775?
CVE-2012-1775 is a critical vulnerability that can allow remote attackers to execute arbitrary code via a crafted MMS stream.
2
How do I patch CVE-2012-1775?
To mitigate CVE-2012-1775, users should update VideoLAN VLC media player to version 2.0.1 or later.
3
What versions of VLC are affected by CVE-2012-1775?
CVE-2012-1775 affects all versions of VLC media player prior to 2.0.1.
4
Can CVE-2012-1775 lead to denial of service?
Yes, CVE-2012-1775 can potentially lead to a denial-of-service condition as the buffer overflow may crash the VLC media player.
5
What are the symptoms of being affected by CVE-2012-1775?
Symptoms may include unexpected crashes or behavior in VLC media player when handling certain MMS streams.