NVD

Id
14368  
Name
CVE-2010-2937  
Description
The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-08-20  
Modified Date
2012-01-27  
Seq
2010-2937  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79444 14368 CVE-2010-2937 http://git.videolan.org/?p=vlc/vlc-1.0.git;a=commit;h=22a22e356c9d93993086810b2e25b59b55925b3a  View
79445 14368 CVE-2010-2937 http://git.videolan.org/?p=vlc/vlc-1.1.git;a=commit;h=24918843e57c7962e28fcb01845adce82bed6516  View
79446 14368 CVE-2010-2937 oval:org.mitre.oval:def:14676  View
79447 14368 CVE-2010-2937 42386  View
79448 14368 CVE-2010-2937 http://www.videolan.org/security/sa1004.html  View
79449 14368 CVE-2010-2937 ADV-2010-2087  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39825 JVNDB-2010-005610 VideoLAN VLC Media Player の TagLib プラグインにおけるサービス運用妨害 (DoS) の脆弱性 VideoLAN VLC Media Player の TagLib プラグインの taglib.cpp の ReadMetaFromId3v2 関数は、ID3v2 タグを適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2010-2937 45517 CVE-2010-2937 14368 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005610.html 2010-08-20 2012-12-20 View