CVE-2012-1775

Videolan Vlc Media Player < 2.0.0 - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18825
metasploit WORKING POC NORMAL
by Florent Hochwelker, sinn3r, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/vlc_mms_bof.rb

Scores

EPSS 0.7289
EPSS Percentile 98.8%

Details

CWE
CWE-119
Status published
Products (48)
videolan/vlc_media_player 0.1.99a
videolan/vlc_media_player 0.1.99b
videolan/vlc_media_player 0.1.99c
videolan/vlc_media_player 0.1.99d
videolan/vlc_media_player 0.1.99e
videolan/vlc_media_player 0.1.99f
videolan/vlc_media_player 0.1.99g
videolan/vlc_media_player 0.1.99h
videolan/vlc_media_player 0.1.99i
videolan/vlc_media_player 0.2.0
... and 38 more
Published Mar 19, 2012
Tracked Since Feb 18, 2026