CVEvulnerability
CVE-2012-0023
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-10-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file.
Affected configurations
• videolan vlc media player 0.9.0
• videolan vlc media player 0.9.1
• videolan vlc media player 0.9.2
• videolan vlc media player 0.9.3
• videolan vlc media player 0.9.4
• videolan vlc media player 0.9.5
• videolan vlc media player 0.9.6
• videolan vlc media player 0.9.8a
• videolan vlc media player 0.9.9
• videolan vlc media player 0.9.9a
• videolan vlc media player 0.9.10
• videolan vlc media player 1.0.0
• videolan vlc media player 1.0.1
• videolan vlc media player 1.0.2
• videolan vlc media player 1.0.3
• videolan vlc media player 1.0.4
• videolan vlc media player 1.0.5
• videolan vlc media player 1.0.6
• videolan vlc media player 1.1.0
• videolan vlc media player 1.1.1
• videolan vlc media player 1.1.2
• videolan vlc media player 1.1.3
• videolan vlc media player 1.1.4
• videolan vlc media player 1.1.4.1
• videolan vlc media player 1.1.5
• videolan vlc media player 1.1.6
• videolan vlc media player 1.1.6.1
• videolan vlc media player 1.1.7
• videolan vlc media player 1.1.8
• videolan vlc media player 1.1.9
• videolan vlc media player 1.1.10
• videolan vlc media player 1.1.10.1
• videolan vlc media player 1.1.11
• videolan vlc media player 1.1.12
Related
Weakness · not in database (1)
References
- http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=7d282fac1cc455b5a5eca2bb56375efcbf879b06 git.videolan.org
- http://secunia.com/advisories/47325 Vendor Advisory
- http://securitytracker.com/id?1026449 securitytracker.com
- http://www.openwall.com/lists/oss-security/2012/10/29/5 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/10/30/9 www.openwall.com
- http://www.osvdb.org/77975 www.osvdb.org
- http://www.securityfocus.com/bid/51231 www.securityfocus.com
- http://www.videolan.org/security/sa1108.html Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71916 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15893 oval.cisecurity.org
- http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=7d282fac1cc455b5a5eca2bb56375efcbf879b06 git.videolan.org
- http://secunia.com/advisories/47325 Vendor Advisory
- http://securitytracker.com/id?1026449 securitytracker.com
- http://www.openwall.com/lists/oss-security/2012/10/29/5 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/10/30/9 www.openwall.com
- http://www.osvdb.org/77975 www.osvdb.org
- http://www.securityfocus.com/bid/51231 www.securityfocus.com
- http://www.videolan.org/security/sa1108.html Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71916 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15893 oval.cisecurity.org