Launchpad CVE tracker

CVE 2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.

Related bugs and status

CVE-2012-2396 (Candidate) is related to these bugs:

Bug #1020403: <vlc-2.0.2: Ogg Heap buffer overflow & CVE-2012-2396

		In	Importance	Status
1020403	<vlc-2.0.2: Ogg Heap buffer overflow & CVE-2012-2396	vlc (Ubuntu)	Undecided	Fix Released
1020403	<vlc-2.0.2: Ogg Heap buffer overflow & CVE-2012-2396	vlc (Debian)	Unknown	Fix Released
1020403	<vlc-2.0.2: Ogg Heap buffer overflow & CVE-2012-2396	Gentoo Linux	Medium	Unknown
1020403	<vlc-2.0.2: Ogg Heap buffer overflow & CVE-2012-2396	vlc (Ubuntu Precise)	Undecided	New

Bug #1025713: SRU request for VLC 2.0.2/2.0.3

		In	Importance	Status
1025713	SRU request for VLC 2.0.2/2.0.3	vlc (Ubuntu)	High	Fix Released
1025713	SRU request for VLC 2.0.2/2.0.3	vlc (Ubuntu Precise)	High	Fix Released
1025713	SRU request for VLC 2.0.2/2.0.3	vlc (Ubuntu Quantal)	High	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2012-2396

References