Detections
Analytics
VLC Media Player < 2.0.1 Multiple RCE
high Nessus Network Monitor Plugin ID 6355
Synopsis
The remote host contains an application that is vulnerable to multiple attack vectors.Description
The remote host is running VLC 2.x prior to 2.0.1 and is affected by multiple vulnerabilities :- A stack overflow exists in MMS support. (CVE-2012-1775)
- Multiple heap overflows exist in Real RTSP support. (CVE-2012-1776)
Solution
Upgrade to VLC Media Player version 2.0.1 or later.See Also
Plugin Details
Severity: High
ID: 6355
Family: Web Clients
Published: 3/21/2012
Updated: 3/6/2019
Nessus ID: 58416
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:videolan:vlc_media_player
Patch Publication Date: 3/15/2012
Vulnerability Publication Date: 3/15/2012
Exploitable With
Metasploit (windows/browser/vlc_mms_bof.rb)
Reference Information
CVE: CVE-2012-1775, CVE-2012-1776