CVE-2011-2587

CVE-2011-2587 describes a heap-based buffer overflow in the RealMedia demuxer of VideoLAN VLC media player versions 1.1.x before 1.1.11. This vulnerability allows remote attackers to cause a denial of service or potentially execute arbitrary code by enticing a user to open a specially crafted Real Media file. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring user interaction (AC:M) but not authentication (Au:N) for exploitation, and could lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.