CVE-2017-8310

Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:videolan:vlc_media_player:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:videolan:vlc_media_player:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:videolan:vlc_media_player:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:videolan:vlc_media_player:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:videolan:vlc_media_player:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:videolan:vlc_media_player:2.2.5:*:*:*:*:*:*:*

History

07 Nov 2023, 02:50

Type Values Removed Values Added
References
  • {'url': 'http://git.videolan.org/?p=vlc/vlc-2.2.git;a=blobdiff;f=modules/codec/subsdec.c;h=addd8c71f30d53558fffd19059b374be45cf0f8e;hp=1b4276e299a2a6668047231d29ac705ae93076ba;hb=7cac839692ab79dbfe5e4ebd4c4e37d9a8b1b328;hpb=3477dba3d506de8d95bccef2c6b67861188f6c29', 'name': 'http://git.videolan.org/?p=vlc/vlc-2.2.git;a=blobdiff;f=modules/codec/subsdec.c;h=addd8c71f30d53558fffd19059b374be45cf0f8e;hp=1b4276e299a2a6668047231d29ac705ae93076ba;hb=7cac839692ab79dbfe5e4ebd4c4e37d9a8b1b328;hpb=3477dba3d506de8d95bccef2c6b67861188f6c29', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • () http://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=blobdiff%3Bf=modules/codec/subsdec.c%3Bh=addd8c71f30d53558fffd19059b374be45cf0f8e%3Bhp=1b4276e299a2a6668047231d29ac705ae93076ba%3Bhb=7cac839692ab79dbfe5e4ebd4c4e37d9a8b1b328%3Bhpb=3477dba3d506de8d95bccef2c6b67861188f6c29 -

Information

Published : 2017-05-23 21:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-8310

Mitre link : CVE-2017-8310

CVE.ORG link : CVE-2017-8310


JSON object : View

Products Affected

videolan

  • vlc_media_player
CWE
CWE-125

Out-of-bounds Read