CVE-2017-8311 PUBLISHED CVSS 7.800000190734863 HIGH

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.

EPSS 7.05% · 91.4th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
7.05%
91.4th percentile

Affected Products

VendorProductVersions
ABBABB Ability Camera Connect <=1.5.0.14

Timeline

References

Open in Interactive Console →