CVE-2010-2937
Description
The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.
Risk Information
Base Score
5.5
MODERATE
Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.382
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities affected in VLC Media Player (X64) 1.1.2 | Windows |
| Multiple vulnerabilities affected in VLC Media Player 1.1.2 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.2 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.2 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.1 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.3 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.4 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.1 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.3 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.4 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.0 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.0 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.5 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.5 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.6 | Windows |
| Vulnerabilities CVE-2008-5276,CVE-2010-2937,CVE-2012-1775,CVE-2012-1776 are affected in VLC Media Player (MSI) (x64) 0.9.7 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.6 | Windows |
| Vulnerabilities CVE-2008-5276,CVE-2010-2937,CVE-2012-1775,CVE-2012-1776 are affected in VLC media player (MSI) 0.9.7 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.8a | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.8a | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.9 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.9 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.10 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 0.9.9a | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.0 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.1 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.2 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.3 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.4 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.5 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.10 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 0.9.9a | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.0 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.1 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.2 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.3 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.4 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.5 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.6 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.0 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.1 | Windows |
| Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.2 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.6 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.0 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.1 | Windows |
| Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.2 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-339135 | VLC Media Player (X64) (3.0.21) |
| PATCH-339134 | VLC Media Player (3.0.21) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234