Описание
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| vlc | fixed | 3.0.7-1 | package | |
| vlc | end-of-life | jessie | package |
Примечания
https://hackerone.com/reports/484398
http://www.jbkempf.com/blog/post/2019/VLC-3.0.7-and-security
EPSS
Процентиль: 93%
0.05295
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
больше 7 лет назад
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
CVSS3: 6.5
nvd
больше 7 лет назад
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
CVSS3: 6.5
github
больше 4 лет назад
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
CVSS3: 7.1
altlinux
больше 7 лет назад
ALT-PU-2019-2021: package `vlc` update to version 3.0.7-alt1
EPSS
Процентиль: 93%
0.05295
Низкий