PT-2012-5986
CVE-2012-5470
·
Published
2012-10-26
·
Updated
2017-09-19
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
VLC media player version 2.0.3
Description
The issue allows remote attackers to cause a denial of service, resulting in an application crash, by using a crafted PNG file. This is related to the libpng plugin in the VLC media player.
Recommendations
For version 2.0.3, consider updating to a newer version to mitigate the risk of a denial of service attack. As a temporary workaround, avoid using the libpng plugin when handling PNG files until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾