Every CVE Search/ Get API key

CVE-2011-0531

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier...

9.3 HighPublic exploitFix available

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Exploit likelihood

41.9%Down 37.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Record
CVE-2011-0531
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Record
CVE-2011-0531
Updated
2026-11-02
EUVDEUVD-2011-0550 No score

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Record
EUVD-2011-0550
Updated
2026-11-03
GitHub AdvisoriesGHSA-w2cf-f7gp-7p29 No score

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier...

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Record
GHSA-w2cf-f7gp-7p29
Weakness
CWE-20
Updated
2026-11-02
OSV No score

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Record
CVE-2011-0531
Updated
2026-11-02
OSVDEBIAN-CVE-2011-0531 No score

demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.

Record
DEBIAN-CVE-2011-0531
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vlc
Debian:12
before 1.1.7-1
1.1.7-1
vlc
Debian:13
before 1.1.7-1
1.1.7-1
vlc
Debian:14
before 1.1.7-1
1.1.7-1
vlc
Debian:6.0
before 1.1.3-1squeeze3, plus listed versions
1.1.3-1squeeze2
1.1.3-1squeeze3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBVideoLAN VLC Media Player 1.1.6 - 'MKV' Memory Corruption (Metasploit)2011-02-08
MetasploitVideoLAN VLC MKV Memory Corruption2011-01-31

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0531 is a high vulnerability (CVSS 9.3) in Videolan Vlc Media Player, published February 7, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 41.9%, the 98th percentile. Fixed in vlc 1.1.7-1.

References

Show 11 moreShow less
MoveEnter Open