CVE-2011-0522

The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC…

published February 7, 2011

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
98.9
In the wild
Unconfirmed
What it is

The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "<" without a closing ">" in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.51538 · 98.9th percentile
Published
2011-02-07T20:19Z
EPSS history
Timeline
  • 07 FEB 20:19Z
    The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC…
    cvelistv5