PT-2019-4900 · Videolan+3 · Vlc Media Player+3
Antonio Morales
·
Publicado
2019-04-29
·
Atualizado
2024-06-15
·
CVE-2019-14498
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
VideoLAN VLC media player version 3.0.7.1
Description
A divide-by-zero error exists in the Control function of demux/caf.c, which can be triggered via a crafted CAF file, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For version 3.0.7.1, consider avoiding the use of crafted CAF files until a patch is available. As a temporary workaround, restricting access to the demux/caf.c component may help minimize the risk of exploitation.
Correção
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Vlc Media Player