VULNERABILITY INTELLIGENCE
CVE-2007-6262
CVSS score6.8 MEDIUM
EPSS probability11.12%
CISA KEVNot currently listed
Published2007-12-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer