CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  Numeric Errors
Summary: the shaddtorecentdocs function in videolan vlc media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to vlc.  note: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2013-07-10
Last Modified Date: 2017-09-19