Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file.

The remote host is affected by the vulnerability described in GLSA-201411-01 (VLC: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VLC. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file using VLC, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host contains VLC player, a multi-media application.

Versions of VLC media player earlier than 1.1.4 are potentially affected by a code execution vulnerability.  The application insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'.  If a malicious DLL with the same name as a required DLL is located in the application's current working directory, the malicious DLL will be loaded.

The version of VLC media player installed on the remote host is earlier than 1.1.4.  Such versions insecurely look in their current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. 

If a malicious DLL with the same name as a required DLL is located in the application's current working directory, the malicious DLL will be loaded.

ID	Name	Product	Family	Type	Severity
78879	GLSA-201411-01 : VLC: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
5651	VLC Media Player < 1.1.4 Patch Subversion Arbitrary DLL Injection Code Execution (deprecated)	Nessus Network Monitor	Web Clients		medium
48906	VLC Media Player < 1.1.4 Path Subversion Arbitrary DLL Injection Code Execution	Nessus	Windows	Local	high

Detections

Analytics

CVE-2010-3124

high

Tenable Plugins

high

medium

high