{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-11-30T00:00:00", "descriptions": [{"lang": "en", "value": "A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a \"bad initialized pointer,\" aka a \"recursive plugin release vulnerability.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "vlcmediaplayer-activex-memory-overwrite(38816)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38816"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.videolan.org/sa0703.html"}, {"name": "ADV-2007-4061", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/4061"}, {"tags": ["x_refsource_MISC"], "url": "http://www.coresecurity.com/?action=item&id=2035"}, {"name": "oval:org.mitre.oval:def:14280", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14280"}, {"name": "27878", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27878"}, {"name": "20071204 CORE-2007-1004: VLC Activex Bad Pointer Initialization Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/484563/100/0/threaded"}, {"name": "26675", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26675"}, {"name": "3420", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3420"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-6262", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a \"bad initialized pointer,\" aka a \"recursive plugin release vulnerability.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "vlcmediaplayer-activex-memory-overwrite(38816)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38816"}, {"name": "http://www.videolan.org/sa0703.html", "refsource": "CONFIRM", "url": "http://www.videolan.org/sa0703.html"}, {"name": "ADV-2007-4061", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/4061"}, {"name": "http://www.coresecurity.com/?action=item&id=2035", "refsource": "MISC", "url": "http://www.coresecurity.com/?action=item&id=2035"}, {"name": "oval:org.mitre.oval:def:14280", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14280"}, {"name": "27878", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27878"}, {"name": "20071204 CORE-2007-1004: VLC Activex Bad Pointer Initialization Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/484563/100/0/threaded"}, {"name": "26675", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26675"}, {"name": "3420", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3420"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-6262", "datePublished": "2007-12-06T02:00:00", "dateReserved": "2007-12-05T00:00:00", "dateUpdated": "2018-10-15T20:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:videolan:vlc_media_player:0.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "18B68706-5A1F-479F-8A38-F93D98481F9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:videolan:vlc_media_player:0.8.6a:*:*:*:*:*:*:*", "matchCriteriaId": "06BB94C4-9315-48FB-8859-425993D42973", "vulnerable": true}, {"criteria": "cpe:2.3:a:videolan:vlc_media_player:0.8.6b:*:*:*:*:*:*:*", "matchCriteriaId": "97E4572E-337D-43F3-81AE-54E496F04E49", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a \"bad initialized pointer,\" aka a \"recursive plugin release vulnerability.\""}, {"lang": "es", "value": "Cierto control ActiveX de axvlc.dll en VideoLAN VLC 0.8.6 anterior a 0.8.6d permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante argumentos manipulados a las funciones (1) addTarget, (2) getVariable, o (3) setVariable, resultando en un \"puntero mal inicializado\", tambi\u00e9n conocido como una \"vulnerabilidad recursiva de liberaci\u00f3n de extensi\u00f3n\"."}], "id": "CVE-2007-6262", "lastModified": "2018-10-15T21:51:25.123", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-12-06T02:46:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27878"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3420"}, {"source": "cve@mitre.org", "url": "http://www.coresecurity.com/?action=item&id=2035"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/484563/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch"], "url": "http://www.securityfocus.com/bid/26675"}, {"source": "cve@mitre.org", "url": "http://www.videolan.org/sa0703.html"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/4061"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38816"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14280"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}