oval:org.mitre.oval:def:12414

Definition Id: oval:org.mitre.oval:def:12414

Oval ID:	oval:org.mitre.oval:def:12414
Title:	Heap based memory corruption vulnerability in "StripTags()" function within the USF and Text subtitles decoders in VideoLAN VLC Media Player 1.1 before 1.1.6
Description:	The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "<" without a closing ">" in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-0522	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP	Product(s):	VLC Media Player
Definition Synopsis:
VLC media player is installed AND Version of VLC Media Player greater than or equal to 1.1.0 and less than 1.1.6

Definition Id: oval:org.mitre.oval:def:11821

Oval ID:	oval:org.mitre.oval:def:11821
Title:	VLC media player is installed
Description:	VLC media player is installed
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:videolan:vlc_media_player	Version:	11
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	VLC media player
Definition Synopsis:
Check if VLC Player is installed
Referenced By:
oval:org.mitre.oval:def:12414