CVE-2011-2588

EPSS 3.0%

發布日:2011/7/27修改日:2026/4/28

也稱為:DEBIAN-CVE-2011-2588

描述

Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file.

受影響套件(1)

Debian/vlcfrom 0, < 1.1.11-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-2588