CVE-2017-9300

Description

plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file.

References

https://www.debian.org/security/2017/dsa-4045

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-18236

http://www.securityfocus.com/bid/98747

http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS