Unscored severity · published Dec 6, 2007
CVE-2007-6262
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2)…
–
CVSS
11.1%
EPSS
No
On KEV
Description
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)11.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Vlc Media Player · Videolan
0.8.6; 0.8.6a; 0.8.6b · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6262
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6262
Vendor Advisory
http://secunia.com/advisories/27878
securityreason.com
http://securityreason.com/securityalert/3420
www.coresecurity.com
http://www.coresecurity.com/?action=item&id=2035
www.securityfocus.com
http://www.securityfocus.com/archive/1/484563/100/0/threaded
Exploit
http://www.securityfocus.com/bid/26675
www.videolan.org
http://www.videolan.org/sa0703.html
More from Vlc Media Player
9.8
CVE-2023-47359
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption
9.8
CVE-2019-13962
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and…
9.8
CVE-2019-12874
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7
9.8
CVE-2017-10699
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy() with a wrong size, leading to a…
9.8
CVE-2016-5108
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or…