CVE-2016-5108
critical · 9.8Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
9.8
CVSS
24.7%
EPSS (exploit prob.)
98th
EPSS percentile
2016-06-08
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| debian | debian_linux | 8.0 |
| videolan | vlc_media_player | <= 2.2.3 |
Check a specific version with /api/v1/cve/match.
References
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html
- http://www.debian.org/security/2016/dsa-3598
- http://www.securityfocus.com/bid/90924
- http://www.securitytracker.com/id/1036009
- http://www.videolan.org/security/sa1601.html
- https://security.gentoo.org/glsa/201701-39
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html
- http://www.debian.org/security/2016/dsa-3598
- http://www.securityfocus.com/bid/90924
- http://www.securitytracker.com/id/1036009
- http://www.videolan.org/security/sa1601.html
- https://security.gentoo.org/glsa/201701-39
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-5108