CVE-2010-1443
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in...
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
Exploit likelihood
What each source reports
NVD Score used
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
- Record
CVE-2010-1443- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
- Record
CVE-2010-1443- Updated
- 2026-11-02
EUVDEUVD-2010-1471 No score
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
- Record
EUVD-2010-1471- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3g28-22mv-7m5h No score
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in...
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
- Record
GHSA-3g28-22mv-7m5h- Updated
- 2026-11-02
OSV No score
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
- Record
CVE-2010-1443- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-1443 No score
The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty location element in an XML Shareable Playlist Format (XSPF) document.
- Record
DEBIAN-CVE-2010-1443- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1443 is a medium vulnerability (CVSS 5.0) in Videolan Vlc Media Player, published December 26, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. Fixed in vlc 1.0.6-1.
References
videolan.org/security/sa1003.html
openwall.com/lists/oss-security/2010/04/28/4
git.videolan.org?p=vlc/vlc-1.1.git%3Ba=commit%3Bh=8902488ba529c0cf4c903a8a84ff20b5737cc753
nvd.nist.gov/vuln/detail/CVE-2010-1443
github.com/advisories/GHSA-3g28-22mv-7m5h
security-tracker.debian.org/tracker/CVE-2010-1443