Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2010-3275

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."

Related bugs and status

CVE-2010-3275 (Candidate) is related to these bugs:

Bug #756368: Heap overflow in MP4 demuxer

		In	Importance	Status
756368	Heap overflow in MP4 demuxer	vlc (Ubuntu)	Undecided	Fix Released
756368	Heap overflow in MP4 demuxer	VLC media player	Critical	Fix Released
756368	Heap overflow in MP4 demuxer	VLC media player 1.0-bugfix	Undecided	Fix Released
756368	Heap overflow in MP4 demuxer	vlc (Ubuntu Lucid)	Undecided	Fix Released
756368	Heap overflow in MP4 demuxer	vlc (Ubuntu Maverick)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

EXPLOIT-DB: 17048
MISC: http://www.coresecurit...
MISC: http://www.metasploit....
CONFIRM: http://www.videolan.or...
BID: 47012
OSVDB: 71277
SECTRACK: 1025250
SECUNIA: 43826
VUPEN: ADV-2011-0759
DEBIAN: DSA-2211
SREASON: 8162
XF: vlcmediaplayer-amv-bo(...
OVAL: oval:org.mitre.oval:de...
BUGTRAQ: 20110323 CORE-2011-020...