9.3

CVE-2010-3276

Exploit
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Videolan ≫ Vlc Media Player Version <= 1.1.7
Videolan ≫ Vlc Media Player Version 0.1.99b
Videolan ≫ Vlc Media Player Version 0.1.99e
Videolan ≫ Vlc Media Player Version 0.1.99f
Videolan ≫ Vlc Media Player Version 0.1.99g
Videolan ≫ Vlc Media Player Version 0.1.99h
Videolan ≫ Vlc Media Player Version 0.1.99i
Videolan ≫ Vlc Media Player Version 0.2.0
Videolan ≫ Vlc Media Player Version 0.2.60
Videolan ≫ Vlc Media Player Version 0.2.61
Videolan ≫ Vlc Media Player Version 0.2.62
Videolan ≫ Vlc Media Player Version 0.2.63
Videolan ≫ Vlc Media Player Version 0.2.70
Videolan ≫ Vlc Media Player Version 0.2.71
Videolan ≫ Vlc Media Player Version 0.2.72
Videolan ≫ Vlc Media Player Version 0.2.73
Videolan ≫ Vlc Media Player Version 0.2.80
Videolan ≫ Vlc Media Player Version 0.2.81
Videolan ≫ Vlc Media Player Version 0.2.82
Videolan ≫ Vlc Media Player Version 0.2.83
Videolan ≫ Vlc Media Player Version 0.2.90
Videolan ≫ Vlc Media Player Version 0.2.91
Videolan ≫ Vlc Media Player Version 0.2.92
Videolan ≫ Vlc Media Player Version 0.3.0
Videolan ≫ Vlc Media Player Version 0.3.1
Videolan ≫ Vlc Media Player Version 0.4.0
Videolan ≫ Vlc Media Player Version 0.4.1
Videolan ≫ Vlc Media Player Version 0.4.2
Videolan ≫ Vlc Media Player Version 0.4.3
Videolan ≫ Vlc Media Player Version 0.4.4
Videolan ≫ Vlc Media Player Version 0.4.5
Videolan ≫ Vlc Media Player Version 0.4.6
Videolan ≫ Vlc Media Player Version 0.5.0
Videolan ≫ Vlc Media Player Version 0.5.1
Videolan ≫ Vlc Media Player Version 0.5.2
Videolan ≫ Vlc Media Player Version 0.5.3
Videolan ≫ Vlc Media Player Version 0.6.0
Videolan ≫ Vlc Media Player Version 0.6.1
Videolan ≫ Vlc Media Player Version 0.6.2
Videolan ≫ Vlc Media Player Version 0.7.0
Videolan ≫ Vlc Media Player Version 0.7.2
Videolan ≫ Vlc Media Player Version 0.8.0
Videolan ≫ Vlc Media Player Version 0.8.1
Videolan ≫ Vlc Media Player Version 0.8.2
Videolan ≫ Vlc Media Player Version 0.8.4
Videolan ≫ Vlc Media Player Version 0.8.5
Videolan ≫ Vlc Media Player Version 0.8.6
Videolan ≫ Vlc Media Player Version 0.9.2
Videolan ≫ Vlc Media Player Version 0.9.3
Videolan ≫ Vlc Media Player Version 0.9.4
Videolan ≫ Vlc Media Player Version 0.9.5
Videolan ≫ Vlc Media Player Version 0.9.6
Videolan ≫ Vlc Media Player Version 0.9.8a
Videolan ≫ Vlc Media Player Version 0.9.9
Videolan ≫ Vlc Media Player Version 0.9.10
Videolan ≫ Vlc Media Player Version 1.0.0
Videolan ≫ Vlc Media Player Version 1.0.1
Videolan ≫ Vlc Media Player Version 1.0.2
Videolan ≫ Vlc Media Player Version 1.0.3
Videolan ≫ Vlc Media Player Version 1.0.4
Videolan ≫ Vlc Media Player Version 1.0.5
Videolan ≫ Vlc Media Player Version 1.0.6
Videolan ≫ Vlc Media Player Version 1.1.0
Videolan ≫ Vlc Media Player Version 1.1.1
Videolan ≫ Vlc Media Player Version 1.1.2
Videolan ≫ Vlc Media Player Version 1.1.3
Videolan ≫ Vlc Media Player Version 1.1.4
Videolan ≫ Vlc Media Player Version 1.1.5
Videolan ≫ Vlc Media Player Version 1.1.6
Videolan ≫ Vlc Media Player Version 1.1.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.47% 0.937
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/43826
Vendor Advisory
http://securityreason.com/securityalert/8162
http://securitytracker.com/id?1025250
http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files
http://www.debian.org/security/2011/dsa-2211
http://www.securityfocus.com/archive/1/517150/100/0/threaded
http://www.securityfocus.com/bid/47012
Exploit
http://www.videolan.org/vlc/releases/1.1.8.html
Patch
http://www.vupen.com/english/advisories/2011/0759
Vendor Advisory
http://www.osvdb.org/71278
https://exchange.xforce.ibmcloud.com/vulnerabilities/66260
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14873