Description
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High
Affected products
- openSUSE / backportssle-15 – sle-15
- openSUSE / backports_sle15.0 – 15.0
- openSUSE / Leap15.0 – 15.0
- openSUSE / Leap15.1 – 15.1
- VideoLAN / VLC media player3.0.7
References
- MISChttps://hackerone.com/reports/502816
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html
Updated 17m ago · 8 sources