Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:ACTIVEX:VLC-PLY-RCE |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
VLC Media Player libdirectx_plugin.dll Plugin Remote Code Execution |
Release Date |
2011/11/08 |
Update Number |
2027 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: VLC Media Player libdirectx_plugin.dll Plugin Remote Code Execution
This signature detects attempts to use unsafe ActiveX controls in the VLC Media Player libdirectx_plugin.dll Plugin. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.
Extended Description
VLC media player is prone to multiple buffer-overflow vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of the affected application or crash the application, denying service to legitimate users. Versions prior to VLC media player 1.1.8 are vulnerable.
Affected Products
- Debian linux 5.0
- Debian linux 5.0 Alpha
- Debian linux 5.0 Amd64
- Debian linux 5.0 Arm
- Debian linux 5.0 Armel
- Debian linux 5.0 Hppa
- Debian linux 5.0 Ia-32
- Debian linux 5.0 Ia-64
- Debian linux 5.0 M68k
- Debian linux 5.0 Mips
- Debian linux 5.0 Mipsel
- Debian linux 5.0 Powerpc
- Debian linux 5.0 S/390
- Debian linux 5.0 Sparc
- Videolan vlc_media_player 0.9.0
- Videolan vlc_media_player 0.9.1
- Videolan vlc_media_player 0.9.10
- Videolan vlc_media_player 0.9.2
- Videolan vlc_media_player 0.9.3
- Videolan vlc_media_player 0.9.4
- Videolan vlc_media_player 0.9.5
- Videolan vlc_media_player 0.9.6
- Videolan vlc_media_player 0.9.7
- Videolan vlc_media_player 0.9.8A
- Videolan vlc_media_player 0.9.9
- Videolan vlc_media_player 1.0.0
- Videolan vlc_media_player 1.0.1
- Videolan vlc_media_player 1.0.2
- Videolan vlc_media_player 1.0.3
- Videolan vlc_media_player 1.0.4
- Videolan vlc_media_player 1.0.5
- Videolan vlc_media_player 1.0.6
- Videolan vlc_media_player 1.1.0
- Videolan vlc_media_player 1.1.0
- Videolan vlc_media_player 1.1.1
- Videolan vlc_media_player 1.1.1
- Videolan vlc_media_player 1.1.2
- Videolan vlc_media_player 1.1.2
- Videolan vlc_media_player 1.1.3
- Videolan vlc_media_player 1.1.3
- Videolan vlc_media_player 1.1.4
- Videolan vlc_media_player 1.1.4
- Videolan vlc_media_player 1.1.5
- Videolan vlc_media_player 1.1.6
- Videolan vlc_media_player 1.1.6.1
- Videolan vlc_media_player 1.1.7
References
- BugTraq: 47012
- CVE: CVE-2010-3275