Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-2396. PoCs published by Senator of Pirates.
AI-analyzed exploit summary This exploit triggers a division by zero vulnerability in VLC 2.0.1 by providing a maliciously crafted MP4 file. The PoC contains a hex-encoded payload designed to crash the application during MP4 file parsing.
Description
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.
Exploits (1)
exploitdb
WORKING POC
by Senator of Pirates · textdoswindows
https://www.exploit-db.com/exploits/18757
This exploit triggers a division by zero vulnerability in VLC 2.0.1 by providing a maliciously crafted MP4 file. The PoC contains a hex-encoded payload designed to crash the application during MP4 file parsing.
Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target:
VLC Media Player 2.0.1
No auth needed
Prerequisites:
victim must open the malicious MP4 file in VLC 2.0.1
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15615
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75038
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/18757/
Scores
EPSS
0.0729
EPSS Percentile
93.6%
Details
Status
published
Products (1)
videolan/vlc_media_player
2.0.1
Published
Apr 19, 2012
Tracked Since
Feb 18, 2026