VideoLAN VLC Media Player CVE-2017-8311 Buffer Overflow Vulnerability

description-logoDescription

Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.

affected-products-logoAffected Applications

VLC Media Player

CVE References

CVE-2017-8311