CVE-2009-2484

No fix known EPSS 35%

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file.

Published 2009-07-16 · CVE record · OSV

Products: videolan vlc_media_player