Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-vn64-q1cr-rub4
Vulnerability ID VCID-vn64-q1cr-rub4
Aliases CVE-2007-6262
Summary A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2007-6262
OSVDB-42192;CVE-2007-6262 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/4688.html
OSVDB-42192;CVE-2007-6262 Exploit http://www.coresecurity.com/?action=item&id=2035
Data source Exploit-DB
Date added Dec. 3, 2007
Description VideoLAN VLC Media Player 0.86 < 0.86d - ActiveX Remote Bad Pointer Initialization
Ransomware campaign use Known
Source publication date Dec. 4, 2007
Exploit type dos
Platform windows
Source update date Oct. 25, 2016
Source URL http://www.coresecurity.com/?action=item&id=2035
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.95842
EPSS Score 0.22802
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T17:33:35.184868+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.0.0