Detections
Analytics
VLC Media Player < 2.2.5 Multiple Vulnerabilities
high Nessus Plugin ID 100592
Language:
Synopsis
A media player installed on the remote host is affected by multiple vulnerabilities.Description
The version of VLC media player installed on the remote host is prior to 2.2.5. It is, therefore, affected by the multiple vulnerabilities :- A denial of service vulnerability exists within file plugins\audio_filter\libmpgatofixed32_plugin.dll when parsing media files due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to crash the application. (CVE-2017-9301)
- A flaw exists, related to a ParseJSS null skip, when handling specially crafted subtitle files downloaded by the media player. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code.
- A heap-based buffer overflow condition exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially crafted AVI file, to execute arbitrary code.
- A memory corruption issue exists when handling LPCM in VOB files. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code.
- An exploitable vulnerability exists in plugins\codec\libflac_plugin.dll, allows remote attackers to cause denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file. (CVE-2017-9300).
- An exploitable Heap out-of-bound read vulnerability exists in ParseJSS of VideoLan VLC. This is due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file. (CVE-2017-8313).
- An exploitable heap based buffer overflow vulnerability exists in ParseJSS of VideoLan VLC. This is due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file. (CVE-2017-8311).
- An exploitable Heap out-of-bound read vulnerability exists in CreateHtmlSubtitle of VideoLan VLC. This is due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file. (CVE-2017-8310).
Solution
Upgrade to VLC version 2.2.5 or later.See Also
http://www.videolan.org/developers/vlc-branch/NEWS
http://www.videolan.org/vlc/releases/2.2.5.html
https://trac.videolan.org/vlc/ticket/17448
https://fortiguard.com/zeroday/FG-VD-16-067
Plugin Details
Severity: High
ID: 100592
File Name: vlc_2_2_5.nasl
Version: 1.8
Type: local
Agent: windows
Family: Windows
Published: 6/2/2017
Updated: 6/12/2020
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2017-9301
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:videolan:vlc_media_player
Required KB Items: installed_sw/VLC media player
Exploit Ease: No known exploits are available
Patch Publication Date: 9/29/2016
Vulnerability Publication Date: 8/29/2016
Reference Information
CVE: CVE-2017-8310, CVE-2017-8311, CVE-2017-8313, CVE-2017-9300, CVE-2017-9301