Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-2194. PoCs published by TecR0c.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service (DoS) vulnerability in VLC Media Player versions 0.8.5 to 1.1.9 due to an integer overflow in the XSPF playlist parser. The PoC uses a maliciously crafted XSPF file with an excessively large <vlc:id> value to trigger a memory access violation.
Description
Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
Exploits (1)
This exploit demonstrates a denial-of-service (DoS) vulnerability in VLC Media Player versions 0.8.5 to 1.1.9 due to an integer overflow in the XSPF playlist parser. The PoC uses a maliciously crafted XSPF file with an excessively large <vlc:id> value to trigger a memory access violation.