CVE-2012-1776
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote...
CVE-2012-1776 is a high vulnerability (CVSS 9.3) in Videolan Vlc Media Player, published March 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.19%, the 92nd percentile. Fixed in vlc 2.0.1-1.
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
Exploit likelihood
What each source reports
NVD Score used
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
- Record
CVE-2012-1776- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
- Record
CVE-2012-1776- Updated
- 2026-11-02
EUVDEUVD-2012-1786 No score
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
- Record
EUVD-2012-1786- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j25f-76fm-8h6g No score
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote...
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
- Record
GHSA-j25f-76fm-8h6g- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
- Record
CVE-2012-1776- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1776 No score
Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Real RTSP stream.
- Record
DEBIAN-CVE-2012-1776- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
videolan.org/security/sa1202.html
securityfocus.com/bid/52550
osvdb.org/80189
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14817
exchange.xforce.ibmcloud.com/vulnerabilities/74118
nvd.nist.gov/vuln/detail/CVE-2012-1776
github.com/advisories/GHSA-j25f-76fm-8h6g
security-tracker.debian.org/tracker/CVE-2012-1776