CVE-2010-3275

high · 9.3

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."

9.3

CVSS

75.5%

EPSS (exploit prob.)

99th

EPSS percentile

2011-03-28

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
videolan	vlc_media_player	<= 1.1.7
videolan	vlc_media_player	0.1.99b
videolan	vlc_media_player	0.1.99e
videolan	vlc_media_player	0.1.99f
videolan	vlc_media_player	0.1.99g
videolan	vlc_media_player	0.1.99h
videolan	vlc_media_player	0.1.99i
videolan	vlc_media_player	0.2.0
videolan	vlc_media_player	0.2.60
videolan	vlc_media_player	0.2.61
videolan	vlc_media_player	0.2.62
videolan	vlc_media_player	0.2.63
videolan	vlc_media_player	0.2.70
videolan	vlc_media_player	0.2.71
videolan	vlc_media_player	0.2.72
videolan	vlc_media_player	0.2.73
videolan	vlc_media_player	0.2.80
videolan	vlc_media_player	0.2.81
videolan	vlc_media_player	0.2.82
videolan	vlc_media_player	0.2.83
videolan	vlc_media_player	0.2.90
videolan	vlc_media_player	0.2.91
videolan	vlc_media_player	0.2.92
videolan	vlc_media_player	0.3.0
videolan	vlc_media_player	0.3.1
videolan	vlc_media_player	0.4.0
videolan	vlc_media_player	0.4.1
videolan	vlc_media_player	0.4.2
videolan	vlc_media_player	0.4.3
videolan	vlc_media_player	0.4.4
videolan	vlc_media_player	0.4.5
videolan	vlc_media_player	0.4.6
videolan	vlc_media_player	0.5.0
videolan	vlc_media_player	0.5.1
videolan	vlc_media_player	0.5.2
videolan	vlc_media_player	0.5.3
videolan	vlc_media_player	0.6.0
videolan	vlc_media_player	0.6.1
videolan	vlc_media_player	0.6.2
videolan	vlc_media_player	0.7.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-3275