Test ID:	1.3.6.1.4.1.25623.1.0.801727
Category:	Buffer overflow
Title:	VLC Media Player 'CDG decoder' Multiple Buffer Overflow Vulnerabilities - Linux
Summary:	VLC Media Player is prone to multiple buffer overflow vulnerabilities.
Description:	Summary: VLC Media Player is prone to multiple buffer overflow vulnerabilities. Vulnerability Insight: The flaws are due to an array indexing errors in the 'DecodeTileBlock()' and 'DecodeScroll()' [modules/codec/cdg.c] functions within the CDG decoder module when processing malformed data. Vulnerability Impact: Successful exploitation could allow attackers to crash the affected application, or execute arbitrary code by convincing a user to open a malicious CD+G (CD+Graphics) media file or visit a specially crafted web page. Affected Software/OS: VLC media player version prior to 1.1.6 on Linux Solution: Upgrade to the VLC media player version 1.1.6 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0021 BugTraq ID: 45927 http://www.securityfocus.com/bid/45927 http://openwall.com/lists/oss-security/2011/01/19/6 http://openwall.com/lists/oss-security/2011/01/20/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12460 http://www.vupen.com/english/advisories/2011/0185 XForce ISS Database: vlcmediaplayer-cdg-code-execution(64879) https://exchange.xforce.ibmcloud.com/vulnerabilities/64879
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.