| Vulnerability Name: | CVE-2009-1045 (CCN-49249) | ||||||||
| Assigned: | 2009-03-16 | ||||||||
| Published: | 2009-03-16 | ||||||||
| Updated: | 2017-09-29 | ||||||||
| Summary: | requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 4.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:U/RC:UC)
6.1 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:U/RC:UC)
| ||||||||
| Vulnerability Type: | CWE-20 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MISC Type: UNKNOWN http://bugs.gentoo.org/show_bug.cgi?id=262708 Source: MITRE Type: CNA CVE-2009-1045 Source: MLIST Type: UNKNOWN [oss-security] 20090317 CVE request -- firefox, vlc, WeeChat Source: CCN Type: OSVDB ID: 52897 VLC Media Player requests/status.xml in_play Action Remote DoS Source: BID Type: Exploit 34126 Source: CCN Type: BID-34126 VLC Media Player Web Interface 'input' Parameter Remote Buffer Overflow Vulnerability Source: CCN Type: VideoLAN Web site VLC media player - Overview Source: XF Type: UNKNOWN vlcmediaplayer-web-status-bo(49249) Source: XF Type: UNKNOWN vlcmediaplayer-web-status-bo(49249) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:14357 Source: EXPLOIT-DB Type: UNKNOWN 8213 | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||