CVE-2017-8311

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute…

published May 23, 2017

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08836 · 95.2th percentile
Published
2017-05-23T21:00Z
EPSS history
Timeline
  • 23 MAY 21:00Z
    Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute…
    cvelistv5