Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.802487
Categoría:Denial of Service
Título:VLC Media Player TiVo Demuxer Double Free Vulnerability (Mac OS X)
Resumen:This host is installed with VLC Media Player and is prone to; double free vulnerability.
Descripción:Summary:
This host is installed with VLC Media Player and is prone to
double free vulnerability.

Vulnerability Insight:
The flaw is due to a double-free error within the 'get_chunk_header()'
function in 'modules/demux/ty.c' of the TiVo demuxer when opening a specially
crafted TiVo (*.ty) file.

Vulnerability Impact:
Successful exploitation will allow an attacker to crash an affected
application and denying service to legitimate users.

Affected Software/OS:
VLC media player version 0.9.0 to 1.1.12 on Mac OS X

Solution:
Upgrade VLC media player to 1.1.13 or later.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: BugTraq ID: 51147
BugTraq ID: 51231
Common Vulnerability Exposure (CVE) ID: CVE-2012-0023
http://www.securityfocus.com/bid/51231
http://www.openwall.com/lists/oss-security/2012/10/29/5
http://www.openwall.com/lists/oss-security/2012/10/30/9
http://www.osvdb.org/77975
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15893
http://securitytracker.com/id?1026449
http://secunia.com/advisories/47325
XForce ISS Database: vlcmediaplayer-getchunkheader-code-exec(71916)
https://exchange.xforce.ibmcloud.com/vulnerabilities/71916
Common Vulnerability Exposure (CVE) ID: CVE-2011-5231
CopyrightCopyright (C) 2012 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.