VLC Media Player Stack Overflow in MP4/ASF/AVI Parser (VideoLAN-SA-0901)

Security Advisory 0901 Summary: A stack overflow may occur when processing MP4, ASF, or AVI files with excessively deep nesting structures. This can overwrite return addresses and alter execution flow. Date: September 2009 Affected Versions: VLC Media Player 1.0.1 to 0.5.0 ID: VideoLAN-SA-0901 CVE Reference: Pending Details A stack overflow may occur when parsing MP4, ASF, or AVI files with excessively deep nesting structures. This will overwrite return addresses, thereby altering the execution flow. Impact If successfully exploited, a malicious third party could trigger arbitrary code execution within the context of VLC Media Player. Threat Mitigation Exploiting this issue requires the user to explicitly open a specially crafted file. Workarounds Users should avoid opening files from untrusted third parties or accessing untrusted remote sites (or disable the VLC browser plugin) until a patch is applied. Alternatively, the MP4, AVI, and ASF demuxer plugins (libmp4_plugin., libavi_plugin., libasf_plugin.) can be manually removed from the VLC plugin installation directory. Solution VLC Media Player 1.0.2 resolves this issue. Patches for older versions are available from the official VLC source code repository, specifically the 1.0-bugfix branch. Acknowledgments This vulnerability was reported by Sebastian Apelt and siberas. References VideoLAN Project: http://www.videolan.org/ VLC Official GIT Repository: http://git.videolan.org/?p=vlc.git History September 14, 2009: Vendor notified. September 15, 2009: Internal patch applied to VLC development version and 0.9-bugfix tree. September 19, 2009: Initial security advisory released. September 20, 2009**: VLC Media Player 1.0.2 released.

Goal Reached Thanks to every supporter — we hit 100%!

VLC Media Player Stack Overflow in MP4/ASF/AVI Parser (VideoLAN-SA-0901)