CVE-2012-5855 in VideoLAN VLC Media Player
Summary
The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.
Reservation
11/12/2012
Disclosure
07/10/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7069 | VideoLAN VLC Media Player SHAddToRecentDocs numeric error | 189 | Unproven | Unavailable | CVE-2012-5855 |