CVE-2011-2194

Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
videolanvlc_media_player
0.8.5
videolanvlc_media_player
0.8.6
videolanvlc_media_player
0.8.6a:a
videolanvlc_media_player
0.8.6b:b
videolanvlc_media_player
0.8.6c:c
videolanvlc_media_player
0.8.6d:d
videolanvlc_media_player
0.8.6e:e
videolanvlc_media_player
0.8.6f:f
videolanvlc_media_player
0.8.6g:g
videolanvlc_media_player
0.8.6h:h
videolanvlc_media_player
0.8.6i:i
videolanvlc_media_player
0.9.0
videolanvlc_media_player
0.9.1
videolanvlc_media_player
0.9.2
videolanvlc_media_player
0.9.3
videolanvlc_media_player
0.9.4
videolanvlc_media_player
0.9.5
videolanvlc_media_player
0.9.6
videolanvlc_media_player
0.9.8a:a
videolanvlc_media_player
0.9.9
videolanvlc_media_player
0.9.9a:a
videolanvlc_media_player
0.9.10
videolanvlc_media_player
1.0.0
videolanvlc_media_player
1.0.1
videolanvlc_media_player
1.0.2
videolanvlc_media_player
1.0.3
videolanvlc_media_player
1.0.4
videolanvlc_media_player
1.0.5
videolanvlc_media_player
1.0.6
videolanvlc_media_player
1.1.0
videolanvlc_media_player
1.1.1
videolanvlc_media_player
1.1.2
videolanvlc_media_player
1.1.3
videolanvlc_media_player
1.1.4
videolanvlc_media_player
1.1.4.1
videolanvlc_media_player
1.1.5
videolanvlc_media_player
1.1.6
videolanvlc_media_player
1.1.7
videolanvlc_media_player
1.1.8
videolanvlc_media_player
1.1.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
vlc
bullseye (security)
3.0.21-0+deb11u1
fixed
bullseye
3.0.21-0+deb11u1
fixed
lenny
not-affected
bookworm
3.0.21-0+deb12u1
fixed
bookworm (security)
3.0.21-0+deb12u1
fixed
sid
3.0.21-2
fixed
trixie
3.0.21-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vlc
natty
Fixed 1.1.9-1ubuntu1.1
released
maverick
Fixed 1.1.4-1ubuntu1.6
released
lucid
Fixed 1.0.6-1ubuntu1.7
released
hardy
ignored
Common Weakness Enumeration
References
http://secunia.com/advisories/44892
http://www.debian.org/security/2011/dsa-2257
http://www.securityfocus.com/bid/48171
http://www.videolan.org/security/sa1104.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14774
http://secunia.com/advisories/44892
http://www.debian.org/security/2011/dsa-2257
http://www.securityfocus.com/bid/48171
http://www.videolan.org/security/sa1104.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14774