NetSight
IP …
medium5.5

CVE-2017-8310

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated me…

Impact

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file.

Affected products

VendorProductAffected versions
VideolanVlc Media Player
Versions 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5

Weakness classification

CWE-125

References