← back
CVE-2007-6262

CVE-2007-6262

EPSS 11.1%
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/4688unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/27878http://securityreason.com/securityalert/3420https://exchange.xforce.ibmcloud.com/vulnerabilities/38816https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14280http://www.coresecurity.com/?action=item&id=2035http://www.securityfocus.com/archive/1/484563/100/0/threadedhttp://www.securityfocus.com/bid/26675http://www.videolan.org/sa0703.htmlhttp://www.vupen.com/english/advisories/2007/4061