CVE-2010-2937 PUBLISHED CVSS 5 MEDIUM

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.

EPSS 1.38% · 80.2th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
1.38%
80.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
videolanvlc_media_player0.9.0, 0.9.1, 0.9.2

Timeline

References

Open in Interactive Console →