CVE-2012-0904: videolan vlc_media_player Resource Management Errors

EPSS trend

Probability

4.84%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.84% on 21-09-2026

21-09-202621-10-2026

EPSS score

4.84%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (archives.neohapsis.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoswindowsVerified
VideoLAN VLC Media Player 1.1.11 - '.amr' Denial of Service (PoC)
Maturity: poc

References

5 links

exchange.xforce.ibmcloud.com/vulnerabilities/72085VDB EntryX Refsource XF
archives.neohapsis.com/archives/bugtraq/2012-01/0033.htmlMailing ListX Refsource BUGTRAQExploit
www.exploit-db.com/exploits/18309ExploitX Refsource EXPLOIT DB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14327VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/51255VDB EntryX Refsource BIDExploit

Related vulnerabilities

CVE-2018-11516debianvlc+13.68%8y ago28-05-2018 16:00The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.CVE-2013-1954debianvlc+16.07%13y ago10-07-2013 19:00The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.CVE-2013-1868debianvlc+110.98%13y ago10-07-2013 19:00Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.CVE-2013-4388debianvlc+83.78%13y ago11-10-2013 22:00Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.CVE-2013-7340debianvlc+11.64%12y ago20-03-2014 19:00VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.CVE-2013-6934live555streaming_media+128.17%12y ago23-01-2014 21:00The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.

All vulnerabilities invlc_media_player

CVE-2012-0904: videolan vlc_media_player Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References