Detections
Analytics
VLC Media Player < 1.1.9 Heap Corruption Vulnerability
high Log Correlation Engine Plugin ID 801170
Synopsis
The remote host contains an application that allows arbitrary code execution.Description
The remote host contains VLC player, a multi-media application.Versions of VLC media player earlier than 1.1.9 are potentially affected by heap corruption vulnerability in the MP4 demultiplexer which could lead to arbitrary code execution.
Solution
Upgrade to VLC Media Player version 1.1.9 or later.See Also
http://.videolan.org/security/sa1103.html
http://.videolan.org/vlc/releases/1.1.9.html
git.videolan.org/?p=vlc.git;a=commit;h=5637ca8141bf39f263ecdb62035d2cb45c740821
Plugin Details
Severity: High
ID: 801170
Family: Web Clients
Published: 4/12/2011
Nessus ID: 53405
Vulnerability Information
Patch Publication Date: 4/12/2011
Vulnerability Publication Date: 4/9/2011
Reference Information
CVE: CVE-2011-1684
BID: 47293