CVE-2012-5855
published 2013-07-10CVE-2012-5855: The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a…
PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
1.21%
64.8th percentile
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | vlc | — | — |
| videolan | vlc_media_player | <= 2.0.4 | — |
| videolan | vlc_media_player | — | — |
| videolan | vlc_media_player | — | — |
| videolan | vlc_media_player | — | — |
| videolan | vlc_media_player | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_debian4.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2012-5855: vlc - The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier mi...
vendor_debian·2012·CVSS 4.3
CVE-2012-5855 [MEDIUM] CVE-2012-5855: vlc - The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier mi...
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-f677-mr7q-hh8x: The SHAddToRecentDocs function in VideoLAN VLC media player 2
ghsa_unreviewed·2022-05-17
CVE-2012-5855 [MEDIUM] GHSA-f677-mr7q-hh8x: The SHAddToRecentDocs function in VideoLAN VLC media player 2
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.
OSV
CVE-2012-5855: The SHAddToRecentDocs function in VideoLAN VLC media player 2
osv·2013-07-10·CVSS 4.3
CVE-2012-5855 [MEDIUM] CVE-2012-5855: The SHAddToRecentDocs function in VideoLAN VLC media player 2
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://marc.info/?l=oss-security&m=135274330022215&w=2http://www.securityfocus.com/archive/1/524626https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16781http://marc.info/?l=oss-security&m=135274330022215&w=2http://www.securityfocus.com/archive/1/524626https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16781
2013-07-10
Published