libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.

The remote host is affected by the vulnerability described in GLSA-201411-01 (VLC: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VLC. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file using VLC, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Ricardo Narvaja discovered that missing input sanitising in VLC, a multimedia player and streamer, could lead to the execution of arbitrary code if a user is tricked into opening a malformed media file.

This update also provides updated packages for oldstable (lenny) for vulnerabilities, which have already been addressed in Debian stable (squeeze), either during the freeze or in DSA-2159(CVE-2010-0522, CVE-2010-1441, CVE-2010-1442 and CVE-2011-0531 ).

The remote host contains VLC player, a multi-media application. 

Versions of VLC media player earlier than 1.1.8 are potentially affected by buffer overflow vulnerabilities when  handling specially crafted AMV and NSV files, which could result in arbitrary code execution. 

The version of VLC media player installed on the remote host is earlier than 1.1.8.  Such versions are reportedly affected by buffer overflow vulnerabilities when handling specially crafted AMV and NSV files, which could result in arbitrary code execution.

ID	Name	Product	Family	Type	Severity
78879	GLSA-201411-01 : VLC: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
53304	Debian DSA-2211-1 : vlc - missing input sanitising	Nessus	Debian Local Security Checks	Local	high
5846	VLC Media Player < 1.1.8 Multiple Buffer Overflows (deprecated)	Nessus Network Monitor	Web Clients		high
52976	VLC Media Player < 1.1.8 Multiple Buffer Overflows	Nessus	Windows	Local	high

Detections

Analytics

CVE-2010-3276

high

Tenable Plugins

high

high

high

high