Every CVESearch/Get API key

CVE-2011-1087

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause...

7.6 HighFix available

CVE-2011-1087 is a high vulnerability (CVSS 7.6) in Videolan Vlc Media Player, published May 3, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.07%, the 94th percentile. Fixed in vlc 1.1.10-1.

What does this mean?
Severity
7.6 HighCVSS 2.0, NVD
Exploit chance
8.07%EPSS, 94th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.1.10-1vlc +2 more

Description

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Exploit likelihood

8.07%Up 1.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vlc
Debian:12
before 1.1.10-1
1.1.10-1
vlc
Debian:13
before 1.1.10-1
1.1.10-1
vlc
Debian:14
before 1.1.10-1
1.1.10-1

What each source reports

NVD Score used7.6

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Record
CVE-2011-1087
CVSS 2.0
7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Record
CVE-2011-1087
Updated
2026-11-02
EUVDEUVD-2011-1102No score

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Record
EUVD-2011-1102
Updated
2026-11-03
GitHub AdvisoriesGHSA-qvq4-69gg-r8gxNo score

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause...

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Record
GHSA-qvq4-69gg-r8gx
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Record
CVE-2011-1087
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1087No score

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Record
DEBIAN-CVE-2011-1087
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 6 moreShow less
MoveEnter Open