VLC Media Player Format String exploit

This module runs a web server waiting for vulnerable clients to connect to it. When the client connects, it will try to install an agent by exploiting a vulnerability in VLC 0.86, which allows user-assisted remote attackers to execute code via a crafted OGG file that triggers format string and overwrites a subroutine pointer during rendering.

Exploit Type - Old
Exploits/Client Side
Exploit Platform
Exploit Type
Product Name