CVE-2013-1954

VLC media player < 2.0.5 - Denial of Service and Possible Remote Code Execution via ASF Demuxer

Title source: llm
STIX 2.1

Description

The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.

References (9)

Core 9
Core References
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=136593191416152&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59793
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=136610343501731&w=2
Exploit x_refsource_confirm
http://trac.videolan.org/vlc/ticket/8024
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/57333
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/89598
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17023
Vendor Advisory x_refsource_confirm
http://www.videolan.org/security/sa1302.html

Scores

EPSS 0.0607
EPSS Percentile 92.5%

Details

CWE
CWE-119
Status published
Products (6)
videolan/vlc_media_player 2.0.0
videolan/vlc_media_player 2.0.1
videolan/vlc_media_player 2.0.2
videolan/vlc_media_player 2.0.3
videolan/vlc_media_player 2.0.4
videolan/vlc_media_player < 2.0.5
Published Jul 10, 2013
Tracked Since Feb 18, 2026