VLC Media Player Bookmark Creation Buffer Overflow Vulnerability

  Severity: HIGH
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004030
  Trend Micro Deep Security DPI Rule Name: 1004030 - VLC Media Player Bookmark Creation Buffer Overflow Vulnerability

  AFFECTED SOFTWARE AND VERSION

  • VLC Media Player