CVE-2011-0531

The record

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Affected packages

Related vulnerabilities

• CVE-2023-47359 Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a… Also affects vlc
• CVE-2023-47360 Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an… Also affects vlc
• CVE-2022-41325 An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4… Also affects vlc
• CVE-2012-1775 Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote… Also affects vlc
• CVE-2008-5036 Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow… Also affects vlc
• CVE-2008-5032 Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow… Also affects vlc
• CVE-2008-4654 Stack-based buffer overflow in the parse_master function in the Ty demux plugin… Also affects vlc
• CVE-2008-3794 Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c… Also affects vlc