CVE-2012-0023

Double free vulnerability in the get_chunk_header function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TiVo (TY) file.

• CWE-399

• http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=7d282fac1cc455b5a5eca2bb56375efcbf879b06
• http://secunia.com/advisories/47325Vendor Advisory
• http://securitytracker.com/id?1026449
• http://www.openwall.com/lists/oss-security/2012/10/29/5
• http://www.openwall.com/lists/oss-security/2012/10/30/9
• http://www.osvdb.org/77975
• http://www.securityfocus.com/bid/51231
• http://www.videolan.org/security/sa1108.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71916
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15893
• http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=7d282fac1cc455b5a5eca2bb56375efcbf879b06
• http://secunia.com/advisories/47325Vendor Advisory
• http://securitytracker.com/id?1026449
• http://www.openwall.com/lists/oss-security/2012/10/29/5
• http://www.openwall.com/lists/oss-security/2012/10/30/9
• http://www.osvdb.org/77975
• http://www.securityfocus.com/bid/51231
• http://www.videolan.org/security/sa1108.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71916
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15893

Published

Oct 30, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0017Cross-site scripting (XSS) vulnerability in inplview.aspx in…
• CVE-2012-0018Microsoft Visio Viewer 2010 Gold and SP1 does not properly v…
• CVE-2012-0019Microsoft Visio Viewer 2010 Gold and SP1 does not properly h…
• CVE-2012-0020Microsoft Visio Viewer 2010 Gold and SP1 does not properly h…
• CVE-2012-0021The log_cookie function in mod_log_config.c in the mod_log_c…
• CVE-2012-0022Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.…
• CVE-2012-0024MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes ha…
• CVE-2012-0025Double free vulnerability in the Free_All_Memory function in…
• CVE-2012-0026Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-0027The GOST ENGINE in OpenSSL before 1.0.0f does not properly h…
• CVE-2012-0028The robust futex implementation in the Linux kernel before 2…
• CVE-2012-0029Heap-based buffer overflow in the process_tx_desc function i…