CVE-2017-9301
Fixed in a distro release EPSS 3%
plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file.
Products: videolan vlc_media_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | vlc | 2.2.5.1-1 |
| Debian 13 | vlc | 2.2.5.1-1 |
| Debian 14 | vlc | 2.2.5.1-1 |
| Ubuntu Pro 16.04 LTS | vlc | no fix |