Windows 7 Highly Critical Vulnerabilities Identified in VLC Media Player

Thread starter JMH
Start date Jul 14, 2011
1 min read
Tags

arbitrary code avi files buffer overflow critical flaws cve-2011-2587 cve-2011-2588 cybersecurity demuxer exploitation heap overflow hossein lotfi media player realmedia research secunia security software security tech news vlc vulnerability

📎 AI Summary:
The thread focuses on reporting two highly critical security vulnerabilities in the VLC media player that could enable arbitrary code execution via maliciously crafted media files (CVE-2011-2587 in the RealMedia demuxer and CVE-2011-2588 in the AVI demuxer). The key question/implication is how these flaws are triggered (heap-based buffer overflow via a crafted RM file, and exploitation through the “strf” chunk in AVI parsing). Overall, the sentiment conveyed is alarmed/concerned due to the severity rating, though the provided excerpt is only an initial alert and doesn’t show further discussion.

JMH

Senior Member

Jul 14, 2011

Thread Author #1

Two security vulnerabilities which can be exploited to execute arbitrary code have been identified in different components of the popular VLC media player application.

Vulnerability research vendor Secunia rates the two VLC security flaws discovered by security researcher Hossein Lotfi as highly critical.

One of the vulnerabilities, identified as CVE-2011-2587, is located in VLC's RealMedia demuxer and can be exploited to cause a heap-based buffer overflow by opening a specially-crafted RealMedia (RM) file.

The second vulnerability (CVE-2011-2588) is similar, but is located in the AVI demuxer and can be exploited when parsing a "strf" chunk in AVI files.

Link Removed - Invalid URL

You must log in or register to reply here.