Skip to main content

VLC Media Player MKV Parsing Integer Overflow Vulnerability

Last Update Date: 10 Jul 2013 12:43 Release Date: 10 Jul 2013 4212 Views

RISK: High Risk

TYPE: Clients - Audio & Video

TYPE: Audio & Video

A vulnerability has been identified in VLC Media Player , which can be exploited by malicious people to potentially compromise a user's system.

 

The vulnerability is caused due to an integer overflow error within the libmkv_plugin.dll module when parsing MKV files, which can be exploited to cause a heap-based buffer overflow via an MKV file with a specially crafted header.

 

Successful exploitation may allow execution of arbitrary code.

 

NOTE: No official solution is currently available.


Impact

  • Remote Code Execution

System / Technologies affected

  • VLC Media Player 2.x

Vulnerability Identifier


Source


Related Link