CVE-2012-0023 — Double Free in VLC Media Player

CWE-3995 documents5 sources
Severity
9.3CRITICALNVD
EPSS
11.9%
top 6.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Videolan VLC Media Player
Timeline
PublishedOct 30
Latest updateMay 4

Description

Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶Debianvideolan/vlc_media_player< 1.1.13-1+3
▶NVDvideolan/vlc_media_player34 versions+33

Patches

Patch: www.videolan.org ↗Patch: www.videolan.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-cw39-vcqq-f398: Double free vulnerability in the get_chunk_header function in modules/demux/ty↗2022-05-04
▶
CVEList
CVE-2012-0023: Double free vulnerability in the get_chunk_header function in modules/demux/ty↗2012-10-30
▶
OSV
CVE-2012-0023: Double free vulnerability in the get_chunk_header function in modules/demux/ty↗2012-10-30
▶

📋Vendor Advisories

1
Debian
CVE-2012-0023: vlc - Double free vulnerability in the get_chunk_header function in modules/demux/ty.c...↗2012
▶
CVE-2012-0023 — Double Free in VLC Media Player | cvebase