Detections
Analytics
VLC Media Player < 0.9.5 TY Media File Handling Memory Curruption (deprecated)
medium Nessus Network Monitor Plugin ID 4726
Synopsis
The remote Windows host contains an application that is affected by a memory corruption vulnerability.Description
The version of VLC Media Player installed on the remote host is earlier than 0.9.5. Such versions do not properly parse TY media files. By sending a specially formatted TY file and tricking a user into opening the file, arbitrary code may be executed within the context of the affected application.Solution
Upgrade to version 0.9.5 or higher.See Also
http://www.coresecurity.com/content/vlc-xspf-memory-corruption
http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0267.html
Plugin Details
Severity: Medium
ID: 4726
Family: Web Clients
Published: 10/27/2008
Updated: 3/6/2019
Nessus ID: 34400
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Temporal Score: 5.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Reference Information
CVE: CVE-2008-4558
BID: 31758