CVE-2007-6262
videolan vlc media player: no CVSS score yet. EPSS 11% chance of exploitation in the next 30 days.
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."
- EPSS
- 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-11-01)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced