vendor:
VLC Player
by:
The Black Devils
7,5
CVSS
HIGH
Remote Denial-of-Service Vulnerability
N/A
CWE
Product Name: VLC Player
Affected Version From: 2.0.8
Affected Version To: 2.0.8
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7
2020
VLC Player 2.0.8 <= Local Crash PoC
VLC Player is prone to a remote denial-of-service vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition. VLC Player 2.0.8 is vulnerable; other versions may also be affected.
Mitigation:
Update to the latest version of VLC Player