CVE-2012-5470 – VideoLAN VLC Media Player 2.0.3 - '.png' ReadAV Crash (PoC)

https://notcve.org/view.php?id=CVE-2012-5470

26 Oct 2012 — libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted PNG file. libpng_plugin en VideoLAN VLC media player v2.0.3 permite a atacantes remotos a provocar una denegación de servicio (caída de la aplicación) a través de un fichero PNG manipulado. Multiple vulnerabilities have been found in VLC, the worst of which could lead to user-assisted execution of arbitrary code. Versions less than 2.1.2 are affected. • https://www.exploit-db.com/exploits/21889 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •