medium4.3Public exploit code
CVE-2012-5470
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VideoLAN VLC Media Player 2.0.3 - '.png' ReadAV Crash (PoC)2012-10-11 · dos · windows · Verified
Impact
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Videolan | Vlc Media Player | Version 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://openwall.com/lists/oss-security/2012/10/24/3
- http://www.exploit-db.com/exploits/21889/
- http://www.securityfocus.com/bid/55850
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15540
- http://openwall.com/lists/oss-security/2012/10/24/3
- http://www.exploit-db.com/exploits/21889/
- http://www.securityfocus.com/bid/55850
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15540