Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:STC:DL:VLC-MEDIAPLAYER-RCE

Severity

Major

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

VLC Media Player Remote Code Execution

Release Date

2012/10/09

Update Number

2191

Supported Platforms

idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: VLC Media Player Remote Code Execution


This signature detects attempts to exploit a known vulnerability in VLC Media Player. A successful attack can lead to arbitrary remote code execution within the context of the server.

Extended Description

VLC Media Player is prone to a remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts may result in a denial-of-service condition. This issue affects VLC Media Player versions 1.1.6.1 and prior.

Affected Products

  • Debian linux 5.0
  • Debian linux 5.0 Alpha
  • Debian linux 5.0 Amd64
  • Debian linux 5.0 Arm
  • Debian linux 5.0 Armel
  • Debian linux 5.0 Hppa
  • Debian linux 5.0 Ia-32
  • Debian linux 5.0 Ia-64
  • Debian linux 5.0 M68k
  • Debian linux 5.0 Mips
  • Debian linux 5.0 Mipsel
  • Debian linux 5.0 Powerpc
  • Debian linux 5.0 S/390
  • Debian linux 5.0 Sparc
  • Pardus linux_2009
  • Videolan vlc_media_player 1.0.0
  • Videolan vlc_media_player 1.0.1
  • Videolan vlc_media_player 1.0.2
  • Videolan vlc_media_player 1.0.3
  • Videolan vlc_media_player 1.0.4
  • Videolan vlc_media_player 1.0.5
  • Videolan vlc_media_player 1.0.6
  • Videolan vlc_media_player 1.1.0
  • Videolan vlc_media_player 1.1.1
  • Videolan vlc_media_player 1.1.2
  • Videolan vlc_media_player 1.1.3
  • Videolan vlc_media_player 1.1.4
  • Videolan vlc_media_player 1.1.5
  • Videolan vlc_media_player 1.1.6
  • Videolan vlc_media_player 1.1.6.1

References

  • BugTraq: 46060
  • CVE: CVE-2011-0531
  • URL: http://git.videolan.org/?p=vlc.git&a=commitdiff&h=59491dcedffbf97612d2c572943b56ee4289dd07&hp=f085cfc1c95b922e3c750ee93ec58c3f2d5f7456
  • URL: http://www.videolan.org/security/sa1102.html

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out