PT-2014-2016 · Videolan+1 · Vlc Media Player+1
Publicado
2014-01-30
·
Atualizado
2017-07-01
·
CVE-2014-1684
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
VideoLAN VLC Media Player versions prior to 2.1.3
Description
The issue is related to errors in number handling in the ASF ReadObject file properties function. Exploitation of this issue can allow a remote attacker to cause a denial of service using a specially crafted ASF file, potentially leading to a divide-by-zero error and crash.
Recommendations
For versions prior to 2.1.3, update to version 2.1.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of ASF files with zero minimum and maximum data packet size until a patch is applied.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Vlc Media Player