CVE-2017-8311
HighPublished
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute...
- Published
- May 23, 2017
- Updated
- Aug 5, 2024
- Assigning CNA
- checkpoint
- Evidence observed
- Apr 24, 2018
Primary CVSS
7.8/ 10High
nvd · CVSS 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H10.8%
Moderate · next 30 days
- Percentile
- 95.7%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute arbitrary code via a crafted subtitles file.
Sources
1SivertPL · windows · Apr 24, 2018
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.