Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.

The remote host is affected by the vulnerability described in GLSA-201411-01 (VLC: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VLC. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file using VLC, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Jean-Baptiste Kempf, on behalf of the VideoLAN project reports :

If successful, a malicious third party could crash the VLC media player process. Arbitrary code execution could be possible on some systems.

The remote host contains VLC player, a multi-media application.

Versions of VLC media player earlier than 2.0.1 are potentially affected by multiple vulnerabilities :

  - A stack overflow exists in MMS support. (CVE-2012-1775)

  - Multiple heap overflows exist in Real RTSP support. (CVE-2012-1776)

The remote host is running VLC 2.x prior to 2.0.1 and is affected by multiple vulnerabilities :

 - A stack overflow exists in MMS support. (CVE-2012-1775)
 - Multiple heap overflows exist in Real RTSP support. (CVE-2012-1776)

The version of VLC media player installed on the remote host is earlier than 2.0.1.  Such versions are affected by multiple vulnerabilities:

  - The function 'MMSOpen' in the MMS access plugin     contains a boundary error that can allow a stack-based     buffer overflow when maliciously crafted MMS streams     are opened. (CVE-2012-1775)

  - The Realrtsp plugin contains an unspecified error that     can allow a heap-based buffer overflow when maliciously     crafted Real rtsp streams are opened. (CVE-2012-1776)

ID	Name	Product	Family	Severity
78879	GLSA-201411-01 : VLC: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
62114	FreeBSD : vlc -- arbitrary code execution in Real RTSP and MMS support (62f36dfd-ff56-11e1-8821-001b2134ef46)	Nessus	FreeBSD Local Security Checks	high
801176	VLC Media Player < 2.0.1 Multiple Code Execution Vulnerabilities	Log Correlation Engine	Web Clients	high
6355	VLC Media Player < 2.0.1 Multiple RCE	Nessus Network Monitor	Web Clients	high
58416	VLC Media Player < 2.0.1 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2012-1775

high

Tenable Plugins

high

high

high

high

high