CVE-2011-1684

Fixed in a distro release EPSS 5%

Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted MP4 file.

Published 2011-05-03 · CVE record · OSV

Products: videolan vlc_media_player

Distro releases