CVE-2010-3276 describes a critical vulnerability in VideoLAN VLC Media Player versions prior to 1.1.8, specifically within the libdirectx_plugin.dll. This flaw allows remote attackers to execute arbitrary code by supplying a specially crafted width value within an NSV file. With a CVSS score of 9.3, this vulnerability is highly severe, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, nor is exploit code publicly available through Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.1.7CPE matchmatch criteria | cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:* | ||
0.1.99bCPE matchmatch criteria | cpe:2.3:a:videolan:vlc_media_player:0.1.99b:*:*:*:*:*:*:* | ||
0.1.99eCPE matchmatch criteria | cpe:2.3:a:videolan:vlc_media_player:0.1.99e:*:*:*:*:*:*:* | ||
0.1.99fCPE matchmatch criteria | cpe:2.3:a:videolan:vlc_media_player:0.1.99f:*:*:*:*:*:*:* | ||
0.1.99gCPE matchmatch criteria | cpe:2.3:a:videolan:vlc_media_player:0.1.99g:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.