Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-0256 — VLC Media Player vulnerability

7 documents6 sources
Severity
7.8HIGHNVD
EPSS
21.6%
top 4.26%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Videolan VLC Media Player
Timeline
PublishedJan 16
Latest updateMay 1

Description

VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶Debianvideolan/vlc_media_player< 0.8.6.c-1+3

🔴Vulnerability Details

3
GHSA
GHSA-f675-j876-jc82: VideoLAN VLC 0↗2022-05-01
▶
OSV
CVE-2007-0256: VideoLAN VLC 0↗2007-01-16
▶
CVEList
CVE-2007-0256: VideoLAN VLC 0↗2007-01-16
▶

💥Exploits & PoCs

2
Exploit-DB
VideoLAN VLC Media Player 0.8.6a - Denial of Service (1)↗2007-01-12
▶
Exploit-DB
VideoLAN VLC Media Player 0.8.6a - Denial of Service (2)↗2007-01-11
▶

📋Vendor Advisories

1
Debian
CVE-2007-0256: vlc - VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (applic...↗2007
▶
CVE-2007-0256 — Videolan VLC Media Player vulnerability | cvebase