CVE-2011-0531

Published Feb 7, 2011 CVSS 2.0 · 9.3 Critical EPSS 41.9% KEV · Not listed
Description
demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2159-1 vlc security update
Debian DSA Debian DSA DSA-2211-1 vlc security update
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 9:58 PM
Reserved
Jan 20, 2011, 12:00 AM
Status
Modified
Published
Feb 7, 2011, 9:00 PM
Modified
Jun 16, 2026, 11:27 PM