In order to exploit this vulnerability, an attacker must be able to submit a user to an application that is vulnerable.

OSVDb ID: 723

CVE ID: not yet assigned

An unvalidated Redirect command injection vulnerability exists in VLC Media Player An attacker can fool a user to click a specially-crafted URL that redirects to a malicious site, resulting in command execution.

CVE ID: not yet assigned

An unvalidated Redirect command injection vulnerability exists in VLC Media Player An attacker can fool a user to click a specially-crafted URL that redirects to a malicious site, resulting in command execution.

CVE ID: not yet assigned

Vulnerability Analysis

An unvalidated Redirect command injection vulnerability exists in VLC Media Player An attacker can fool a user to click a specially-crafted URL that redirects to a malicious site, resulting in command execution.

Vulnerability overview

An unvalidated Redirect command injection vulnerability exists in VLC Media Player. This vulnerability allows for an attacker to fool a user to click a specially-crafted URL, which redirects to a malicious site, resulting in command execution. This vulnerability is not yet assigned CVE ID.

Vulnerability summary

There are two unvalidated Redirect command injection vulnerabilities in VLC Media Player. These vulnerabilities can be exploited by submitting a user to an application that is vulnerable.

Timeline

Published on: 08/22/2022 19:15:00 UTC
Last modified on: 08/26/2022 15:09:00 UTC

References