cbcvebase.
CVE-2011-2588
published 2011-07-27

CVE-2011-2588: Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers…

PriorityP431medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.69%
88.3th percentile
Heap-based buffer overflow in the AVI_ChunkRead_strf function in libavi.c in the AVI demuxer in VideoLAN VLC media player before 1.1.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted AVI media file.

Affected

79 ranges· showing 25
VendorProductVersion rangeFixed in
debianvlc< vlc 1.1.11-1 (bookworm)vlc 1.1.11-1 (bookworm)
videolanvlc_media_player<= 1.1.10.1—
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.