CVE-2014-1684
VLC Media Player < 2.1.3 - Denial of Service via ASF File Packet Size Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-1684. PoCs published by Saif.
AI-analyzed exploit summary This PoC exploits a division-by-zero vulnerability in VLC Media Player's ASF demuxer by modifying the minimum and maximum data packet sizes to zero, causing a DoS. It requires a valid ASF file as input and uses the Python bitstring module to manipulate the file.
Description
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.
Exploits (1)
This PoC exploits a division-by-zero vulnerability in VLC Media Player's ASF demuxer by modifying the minimum and maximum data packet sizes to zero, causing a DoS. It requires a valid ASF file as input and uses the Python bitstring module to manipulate the file.