Unscored CVE-2012-5855 EUVD-2012-5733GHSA-f677-mr7q-hh8x

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of serv…

Published Jul 10, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.

References

20121105 VideoLAN VLC Media Player <= 2.0.4 Crash Bug mailing-list
oval:org.mitre.oval:def:16781 vdb-entry signature
[oss-security] 20121112 VLC 2.0.4 SHAddToRecentDocs CVE-2012-5855 mailing-list