Felipe Manzano

Pesquisador deCore Security Technologies

#16871de 60,450

18.6CVSS total

Vulnerabilidades · 2

Alta

2

Vlc Media Player

The issue allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file. This is related to the MP4 demuxer (mp4.c) in VLC media player when used in Miro Player.

The issue is related to an array index error in the libmpdemux/demux mov.c file, which could potentially allow remote attackers to execute arbitrary code. This is possible through a crafted QuickTime MOV file that contains a specifically designed stsc atom tag.