NVD

Id
42172  
Name
CVE-2012-0023  
Description
Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-10-30  
Modified Date
2016-12-07  
Seq
2012-0023  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212858 42172 CVE-2012-0023 http://git.videolan.org/?p=vlc.git;a=commit;h=7d282fac1cc455b5a5eca2bb56375efcbf879b06  View
212859 42172 CVE-2012-0023 oval:org.mitre.oval:def:15893  View
212860 42172 CVE-2012-0023 1026449  View
212861 42172 CVE-2012-0023 51231  View
212862 42172 CVE-2012-0023 http://www.videolan.org/security/sa1108.html  View
212863 42172 CVE-2012-0023 vlcmediaplayer-getchunkheader-code-exec(71916)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34949 JVNDB-2011-005191 VideoLAN VLC media player の modules/demux/ty.c におけるサービス運用妨害 (DoS) の脆弱性 VideoLAN VLC media player の modules/demux/ty.c の get_chunk_header 関数には、メモリを二重に解放する不備があるため、サービス運用妨害 (クラッシュ) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2012-0023 53261 CVE-2012-0023 42172 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005191.html 2011-12-20 2012-11-01 View