CVE-2012-3377

VLC media player < 2.0.2 - Heap-Based Buffer Overflow in OGG Demuxer

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file.

References (7)

Core 7
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/07/06/2
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027224
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15299
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49835
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/54345
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/07/06/1

Scores

EPSS 0.0380
EPSS Percentile 88.8%

Details

CWE
CWE-119
Status published
Products (50)
videolan/vlc_media_player 0.1.99a
videolan/vlc_media_player 0.1.99b
videolan/vlc_media_player 0.1.99c
videolan/vlc_media_player 0.1.99d
videolan/vlc_media_player 0.1.99e
videolan/vlc_media_player 0.1.99f
videolan/vlc_media_player 0.1.99g
videolan/vlc_media_player 0.1.99h
videolan/vlc_media_player 0.1.99i
videolan/vlc_media_player 0.2.0
... and 40 more
Published Jul 12, 2012
Tracked Since Feb 18, 2026