Gravité: : Critique
  Date du conseil: 21 juillet 2015

  Description

The web interface for VLC version 2.1.3 suffers from a cross site scripting vulnerability. Using a specially crafted HTTP request, it is possible to exploit a lack in the neutralization of the error page output which includes the user submitted content. Successful exploitation of the vulnerability, results in the execution of arbitrary code in user's browser in the context of the vulnerable website through a Reflected XSS.

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1000552