CVE-2011-1684
vlc - heap-based buffer overflow
EPSS 4.6%
描述
Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.
如何修補 CVE-2011-1684
要修補 CVE-2011-1684,請將受影響套件升級到下列已修補版本。
- Debian/vlc—升級至 1.1.8-3 或更新版本
- Debian/vlc—升級至 1.1.3-1squeeze5 或更新版本
CVE-2011-1684 正在被利用嗎?
低 — EPSS 為 4.6%,目前沒有觀察到大規模利用活動。
受影響套件(2)
- from 0, < 1.1.8-3
- from 0, < 1.1.3-1squeeze5