CVEs-PoC/2010/CVE-2010-3275.md

CVE-2010-3275

Description

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."

POC

Reference

• http://securityreason.com/securityalert/8162
• http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files

Github

• https://github.com/JohnSomanza/Qualys-Vulnerability-Management