Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.

The remote host is affected by the vulnerability described in GLSA-201411-01 (VLC: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VLC. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file using VLC, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Rocco Calvi discovered that the XSPF playlist parser of VLC, a multimedia player and streamer, is prone to an integer overflow resulting in a heap-based buffer overflow. This might allow an attacker to execute arbitrary code by tricking a victim into opening a specially crafted file.

The oldstable distribution (lenny) is not affected by this problem.

The remote host contains VLC player, a multi-media application.

Versions of VLC media player earlier than 1.1.10 are potentially affected by an integer overflow in the XSPF playlist parser.  Exploiting this vulnerability can lead to application crashes and possibly code execution.

The remote host contains VLC player, a multi-media application.  

Versions of VLC media player earlier than 1.1.10 are potentially affected by an integer overflow in the XSPF playlist parser.  Exploiting this vulnerability can lead to application crashes and possibly code execution.

The version of VLC media player installed on the remote Windows host is prior to 1.1.10. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability exists in VideoLAN VLC media player before 1.1.10.     An unauthenticated remote attacker can exploit this issue, via a malformed AMV file, to cause a denial of     service (memory corruption) or possibly execute arbitrary code. (CVE-2011-1931).

  - A denial of service (DoS) vulnerability exists in VideoLAN VLC media player before 1.1.10 due to integer     overflow in XSPF playlist parser. An unauthenticated remote attacker can exploit this issue, via     unspecified vectors that trigger a heap-based buffer overflow to cause a denial of service     (memory corruption) or possibly execute arbitrary code. (CVE-2011-2194).

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
78879	GLSA-201411-01 : VLC: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
55045	Debian DSA-2257-1 : vlc - heap-based buffer overflow	Nessus	Debian Local Security Checks	high
801174	VLC Media Player < 1.1.10 XSPF Playlist Parser Integer Overflow	Log Correlation Engine	Web Clients	high
5946	VLC Media Player < 1.1.10 XSPF Playlist Parser Integer Overflow (deprecated)	Nessus Network Monitor	Web Clients	high
55024	VLC < 1.1.10 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2011-2194

critical

Tenable Plugins

high

high

high

high

critical