70698 : VLC Media Player MKV Demuxer modules/demux/mkv/mkv.hpp MKV_IS_ID Macro Arbitrary Code Execution
Printer | http://osvdb.org/70698 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
25	2213	over 2 years ago	over 1 year ago	12 times	100%

Timeline

Disclosure Date
2011-01-30

Time to Patch
4 days

Description

VLC Media Player contains an input validation error within the 'MKV_IS_ID' macro in 'modules/demux/mkv/mkv.hpp' of the MKV demuxer. This may be exploited by a context-dependent attacker with a crafted MKV file to execute arbitrary code.

Classification

Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Public, Exploit Private
Disclosure: Vendor Verified

Solution

Upgrade to version 1.1.7 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

VideoLAN

VLC media player

1.1.6.1

References

Security Tracker: 1025018
CVE ID: 2011-0531 (see also: NVD)
Secunia Advisory ID: 43131 43242 44019
Bugtraq ID: 46060
ISS X-Force ID: 65045
Metasploit ID: 70698
Vendor Specific News/Changelog Entry: http://git.videolan.org/?p=vlc.git;a=commit;h=59491dcedffbf97612d2c572943b56ee4289dd07
Vendor Specific Advisory URL: http://www.debian.org/security/2011/dsa-2159
http://www.debian.org/security/2011/dsa-2211
http://www.videolan.org/security/sa1102.html
Other Advisory URL: http://www.openwall.com/lists/oss-security/2011/01/31/4
http://www.openwall.com/lists/oss-security/2011/01/31/8

Tools & Filters

	51851
	5756

Credit

Dan Rosenberg - Virtual Security Research

CVSSv2 Score

CVSSv2 Base Score = 9.3
Source: nvd.nist.gov | Generated: 2011-02-08 | Disagree?

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.