{"uuid": "95a9bfcf-a7ff-4492-83dd-aadcce38534c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-2484", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vlc_smb_uri.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack-based buffer overflow in the Win32AddConnection\\n          function of the VideoLAN VLC media player. Versions 0.9.9 through 1.0.1 are\\n          reportedly affected.\\n\\n          This vulnerability is only present in Win32 builds of VLC.\\n\\n          This payload was found to work with the windows/exec and\\n          windows/meterpreter/reverse_tcp payloads. However, the\\n          windows/meterpreter/reverse_ord_tcp was found not to work.\", \"disclosure_date\": \"2009-06-24\", \"fullname\": \"exploit/windows/fileformat/vlc_smb_uri\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/vlc_smb_uri.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/fileformat/vlc_smb_uri\", \"references\": [\"BID-35500\", \"OSVDB-55509\", \"CVE-2009-2484\", \"URL-http://git.videolan.org/?p=vlc.git;a=commit;h=e60a9038b13b5eb805a76755efc5c6d5e080180f\", \"EDB-9029\"], \"rport\": null, \"session_types\": false, \"targets\": [\"vlc 0.9.9 on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:33.424034Z"}