VLC Media Player MMS Support Stack Overflow Vulnerability
Severity: CRITICAL
CVE Identifier: CVE-2012-1775
Advisory Date: JUL 21, 2015
DESCRIPTION
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004964
Trend Micro Deep Security DPI Rule Name: 1004964 - VLC Media Player MMS Protocol Stack Based Buffer Overflow Vulnerability
AFFECTED SOFTWARE AND VERSION
- videolan vlc_media_player 0.1.99a
- videolan vlc_media_player 0.1.99b
- videolan vlc_media_player 0.1.99c
- videolan vlc_media_player 0.1.99d
- videolan vlc_media_player 0.1.99e
- videolan vlc_media_player 0.1.99f
- videolan vlc_media_player 0.1.99g
- videolan vlc_media_player 0.1.99h
- videolan vlc_media_player 0.1.99i
- videolan vlc_media_player 0.2.0
- videolan vlc_media_player 0.2.50
- videolan vlc_media_player 0.2.60
- videolan vlc_media_player 0.2.61
- videolan vlc_media_player 0.2.62
- videolan vlc_media_player 0.2.63
- videolan vlc_media_player 0.2.70
- videolan vlc_media_player 0.2.71
- videolan vlc_media_player 0.2.72
- videolan vlc_media_player 0.2.73
- videolan vlc_media_player 0.2.80
- videolan vlc_media_player 0.2.81
- videolan vlc_media_player 0.2.82
- videolan vlc_media_player 0.2.83
- videolan vlc_media_player 0.2.90
- videolan vlc_media_player 0.2.91
- videolan vlc_media_player 0.2.92
- videolan vlc_media_player 0.3.0
- videolan vlc_media_player 0.3.1
- videolan vlc_media_player 0.4.0
- videolan vlc_media_player 0.4.1
- videolan vlc_media_player 0.4.2
- videolan vlc_media_player 0.4.3
- videolan vlc_media_player 0.4.3-ac3
- videolan vlc_media_player 0.4.4
- videolan vlc_media_player 0.4.5
- videolan vlc_media_player 0.4.6
- videolan vlc_media_player 0.5.0
- videolan vlc_media_player 0.5.1
- videolan vlc_media_player 0.5.2
- videolan vlc_media_player 0.5.3
- videolan vlc_media_player 0.6.0
- videolan vlc_media_player 0.6.1
- videolan vlc_media_player 0.6.2
- videolan vlc_media_player 0.7.0
- videolan vlc_media_player 0.7.1
- videolan vlc_media_player 0.7.1a
- videolan vlc_media_player 0.7.2
- videolan vlc_media_player 0.8.0
- videolan vlc_media_player 0.8.1
- videolan vlc_media_player 0.8.1337
- videolan vlc_media_player 0.8.2
- videolan vlc_media_player 0.8.4
- videolan vlc_media_player 0.8.4a
- videolan vlc_media_player 0.8.5
- videolan vlc_media_player 0.8.6
- videolan vlc_media_player 0.8.6a
- videolan vlc_media_player 0.8.6b
- videolan vlc_media_player 0.8.6c
- videolan vlc_media_player 0.8.6d
- videolan vlc_media_player 0.8.6e
- videolan vlc_media_player 0.8.6f
- videolan vlc_media_player 0.8.6g
- videolan vlc_media_player 0.8.6h
- videolan vlc_media_player 0.8.6i
- videolan vlc_media_player 0.9
- videolan vlc_media_player 0.9.0
- videolan vlc_media_player 0.9.1
- videolan vlc_media_player 0.9.10
- videolan vlc_media_player 0.9.2
- videolan vlc_media_player 0.9.3
- videolan vlc_media_player 0.9.4
- videolan vlc_media_player 0.9.5
- videolan vlc_media_player 0.9.6
- videolan vlc_media_player 0.9.7
- videolan vlc_media_player 0.9.8
- videolan vlc_media_player 0.9.8a
- videolan vlc_media_player 0.9.9
- videolan vlc_media_player 0.9.9a
- videolan vlc_media_player 1.0.0
- videolan vlc_media_player 1.0.1
- videolan vlc_media_player 1.0.2
- videolan vlc_media_player 1.0.3
- videolan vlc_media_player 1.0.4
- videolan vlc_media_player 1.0.5
- videolan vlc_media_player 1.0.6
- videolan vlc_media_player 1.1.0
- videolan vlc_media_player 1.1.1
- videolan vlc_media_player 1.1.10
- videolan vlc_media_player 1.1.10.1
- videolan vlc_media_player 1.1.11
- videolan vlc_media_player 1.1.13
- videolan vlc_media_player 1.1.2
- videolan vlc_media_player 1.1.3
- videolan vlc_media_player 1.1.4
- videolan vlc_media_player 1.1.4.1
- videolan vlc_media_player 1.1.5
- videolan vlc_media_player 1.1.6
- videolan vlc_media_player 1.1.6.1
- videolan vlc_media_player 1.1.7
- videolan vlc_media_player 1.1.8
- videolan vlc_media_player 1.1.9
- videolan vlc_media_player 2.0.0
Featured Stories
Open RAN: Attack of the xAppsThis article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handlingRead more
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking ServicesThis article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.Read more
How Residential Proxies and CAPTCHA-Solving Services Become Agents of AbuseThis article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.Read more
Abusing Argo CD, Helm, and Artifact Hub: An Analysis of Supply Chain Attacks in Cloud-Native ApplicationsWe provide an overview of cloud-native tools and examine how cybercriminals can exploit their vulnerabilities to launch supply chain attacks.Read more