{
  "schema_version": "1.4.0",
  "id": "GHSA-64pw-5m9v-5q76",
  "modified": "2025-04-12T12:43:28Z",
  "published": "2022-05-17T04:19:07Z",
  "aliases": [
    "CVE-2011-3623"
  ],
  "details": "Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related to the ASF_ObjectDumpDebug function in modules/demux/asf/libasf.c; (2) a crafted AVI file, related to the AVI_ChunkDumpDebug_level function in modules/demux/avi/libavi.c; or (3) a crafted MP4 file, related to the __MP4_BoxDumpStructure function in modules/demux/mp4/libmp4.c.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3623"
    },
    {
      "type": "WEB",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=285370"
    },
    {
      "type": "WEB",
      "url": "http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=861e374d03e6c60c7d3c98428c632fe3b9e371b2"
    },
    {
      "type": "WEB",
      "url": "http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=c5b02d011b8c634d041167f4d2936b55eca4d18d"
    },
    {
      "type": "WEB",
      "url": "http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=dfe7084e8cc64e9b7a87cd37065b59cba2064823"
    },
    {
      "type": "WEB",
      "url": "http://git.videolan.org/?p=vlc.git;a=commit;h=861e374d03e6c60c7d3c98428c632fe3b9e371b2"
    },
    {
      "type": "WEB",
      "url": "http://git.videolan.org/?p=vlc.git;a=commit;h=c5b02d011b8c634d041167f4d2936b55eca4d18d"
    },
    {
      "type": "WEB",
      "url": "http://git.videolan.org/?p=vlc.git;a=commit;h=dfe7084e8cc64e9b7a87cd37065b59cba2064823"
    },
    {
      "type": "WEB",
      "url": "http://openwall.com/lists/oss-security/2011/10/18/10"
    },
    {
      "type": "WEB",
      "url": "http://www.videolan.org/security/sa0901.html"
    }
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2014-12-26T20:59:00Z"
  }
}