Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream.

The remote host is affected by the vulnerability described in GLSA-201411-01 (VLC: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VLC. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file using VLC, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Jean-Baptiste Kempf, on behalf of the VideoLAN project reports :

If successful, a malicious third party could crash the VLC media player process. Arbitrary code execution could be possible on some systems.

The remote host is running VLC 2.x prior to 2.0.1 and is affected by multiple vulnerabilities :

 - A stack overflow exists in MMS support. (CVE-2012-1775)
 - Multiple heap overflows exist in Real RTSP support. (CVE-2012-1776)

The version of VLC media player installed on the remote host is earlier than 2.0.1.  Such versions are affected by multiple vulnerabilities:

  - The function 'MMSOpen' in the MMS access plugin     contains a boundary error that can allow a stack-based     buffer overflow when maliciously crafted MMS streams     are opened. (CVE-2012-1775)

  - The Realrtsp plugin contains an unspecified error that     can allow a heap-based buffer overflow when maliciously     crafted Real rtsp streams are opened. (CVE-2012-1776)

ID	Name	Product	Family	Type	Severity
78879	GLSA-201411-01 : VLC: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
62114	FreeBSD : vlc -- arbitrary code execution in Real RTSP and MMS support (62f36dfd-ff56-11e1-8821-001b2134ef46)	Nessus	FreeBSD Local Security Checks	Local	high
6355	VLC Media Player < 2.0.1 Multiple RCE	Nessus Network Monitor	Web Clients		high
58416	VLC Media Player < 2.0.1 Multiple Vulnerabilities	Nessus	Windows	Local	high

Detections

Analytics

CVE-2012-1775

high

Tenable Plugins

high

high

high

high