HTTP: VideoLAN VLC Media Player SMB Link Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the VideoLAN VLC Media Player. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

VLC Media Player is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions. VLC Media Player 0.9.9 through 1.0.1 for Windows are vulnerable; other versions may also be affected.

Affected Products

Videolan vlc_media_player

References

BugTraq: 35500

CVE: CVE-2009-2484

URL: http://git.videolan.org/?p=vlc.git;a=commit;h=e60a9038b13b5eb805a76755efc5c6d5e080180f

Short Name

HTTP:STC:M3U-VLC-SMB-LINK

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: VideoLAN VLC Media Player SMB Link Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?