Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-wukc-mwey-5uar
Vulnerability ID VCID-wukc-mwey-5uar
Aliases CVE-2007-6262
Summary A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability."
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.22802 https://api.first.org/data/v1/epss?cve=CVE-2007-6262
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2007-6262
OSVDB-42192;CVE-2007-6262 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/4688.html
OSVDB-42192;CVE-2007-6262 Exploit http://www.coresecurity.com/?action=item&id=2035
Data source Exploit-DB
Date added Dec. 3, 2007
Description VideoLAN VLC Media Player 0.86 < 0.86d - ActiveX Remote Bad Pointer Initialization
Ransomware campaign use Known
Source publication date Dec. 4, 2007
Exploit type dos
Platform windows
Source update date Oct. 25, 2016
Source URL http://www.coresecurity.com/?action=item&id=2035
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.95975
EPSS Score 0.22802
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T17:16:13.249290+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0