Vulnerability Name:

CVE-2012-0023 (CCN-71916)

Assigned:2011-12-20
Published:2011-12-20
Updated:2017-11-30
Summary:Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-399
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2011-5231

Source: MITRE
Type: CNA
CVE-2012-0023

Source: CONFIRM
Type: Patch
http://git.videolan.org/?p=vlc.git;a=commit;h=7d282fac1cc455b5a5eca2bb56375efcbf879b06

Source: CCN
Type: SA47325
VLC Media Player "get_chunk_header()" Double-Free Vulnerability

Source: SECUNIA
Type: Vendor Advisory
47325

Source: SECTRACK
Type: UNKNOWN
1026449

Source: MLIST
Type: UNKNOWN
[oss-security] 20121029 VideoLAN TiVo Demuxer Duplicate CVEs (CVE-2011-5231 and CVE-2012-0023)

Source: MLIST
Type: UNKNOWN
[oss-security] 20121030 RE: VideoLAN TiVo Demuxer Duplicate CVEs (CVE-2011-5231 and CVE-2012-0023)

Source: OSVDB
Type: UNKNOWN
77975

Source: CCN
Type: OSVDB ID: 77975
VLC Media Player modules/demux/ty.c get_chunk_header() Function Double-free TiVo File Handling Remote Memory Corruption

Source: CCN
Type: BID-51147
VLC Media Player 'get_chunk_header()' Function Memory Corruption Vulnerability

Source: BID
Type: UNKNOWN
51231

Source: CCN
Type: BID-51231
VLC Media Player TiVo Demuxer Remote Heap-Based Buffer Overflow Vulnerability

Source: CCN
Type: VideoLAN-SA-1108
Buffer overflow in VLC TiVo demuxer

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.videolan.org/security/sa1108.html

Source: XF
Type: UNKNOWN
vlcmediaplayer-getchunkheader-code-exec(71916)

Source: XF
Type: UNKNOWN
vlcmediaplayer-getchunkheader-code-exec(71916)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:15893

Vulnerable Configuration:Configuration 1:
  • cpe:/a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.5:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.6:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.8a:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.9:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.9a:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:0.9.10:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.4.1:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.8:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.9:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.10:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.10.1:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.11:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.12:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:videolan:vlc_media_player:0.9:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.11:*:*:*:*:*:*:*
  • OR cpe:/a:videolan:vlc_media_player:1.1.12:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:15893
    V
    		Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12
    2012-12-10
    oval:com.ubuntu.precise:def:20120023000
    V
    		CVE-2012-0023 on Ubuntu 12.04 LTS (precise) - medium.
    2012-10-30
    BACK
    videolan vlc media player 0.9.0
    videolan vlc media player 0.9.1
    videolan vlc media player 0.9.2
    videolan vlc media player 0.9.3
    videolan vlc media player 0.9.4
    videolan vlc media player 0.9.5
    videolan vlc media player 0.9.6
    videolan vlc media player 0.9.8a
    videolan vlc media player 0.9.9
    videolan vlc media player 0.9.9a
    videolan vlc media player 0.9.10
    videolan vlc media player 1.0.0
    videolan vlc media player 1.0.1
    videolan vlc media player 1.0.2
    videolan vlc media player 1.0.3
    videolan vlc media player 1.0.4
    videolan vlc media player 1.0.5
    videolan vlc media player 1.0.6
    videolan vlc media player 1.1.0
    videolan vlc media player 1.1.1
    videolan vlc media player 1.1.2
    videolan vlc media player 1.1.3
    videolan vlc media player 1.1.4
    videolan vlc media player 1.1.4.1
    videolan vlc media player 1.1.5
    videolan vlc media player 1.1.6
    videolan vlc media player 1.1.6.1
    videolan vlc media player 1.1.7
    videolan vlc media player 1.1.8
    videolan vlc media player 1.1.9
    videolan vlc media player 1.1.10
    videolan vlc media player 1.1.10.1
    videolan vlc media player 1.1.11
    videolan vlc media player 1.1.12
    videolan vlc media player 0.9
    videolan vlc media player 1.1.3
    videolan vlc media player 1.1.4
    videolan vlc media player 1.1.2
    videolan vlc media player 1.1.1
    videolan vlc media player 1.1.0
    videolan vlc media player 1.1.5
    videolan vlc media player 1.1.6
    videolan vlc media player 1.1.7
    videolan vlc media player 1.1.11
    videolan vlc media player 1.1.12