CVE-2013-4388

2013-10-1122:55:40

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-4388

buffer overflow

mp4a packetizer

videolan vlc media player

denial of service

arbitrary code execution

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.051 Low

EPSS

Percentile

93.0%

JSON

Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Affected configurations

NVD

Node

videolanvlc_media_playerRange≤2.0.7

videolanvlc_media_playerMatch2.0.0

videolanvlc_media_playerMatch2.0.1

videolanvlc_media_playerMatch2.0.2

videolanvlc_media_playerMatch2.0.3

videolanvlc_media_playerMatch2.0.4

videolanvlc_media_playerMatch2.0.5

videolanvlc_media_playerMatch2.0.6

CPENameOperatorVersion
videolan:vlc_media_playervideolan vlc media playerle2.0.7
videolan:vlc_media_playervideolan vlc media playereq2.0.0
videolan:vlc_media_playervideolan vlc media playereq2.0.1
videolan:vlc_media_playervideolan vlc media playereq2.0.2
videolan:vlc_media_playervideolan vlc media playereq2.0.3
videolan:vlc_media_playervideolan vlc media playereq2.0.4
videolan:vlc_media_playervideolan vlc media playereq2.0.5
videolan:vlc_media_playervideolan vlc media playereq2.0.6

CPE	Name	Operator	Version
videolan:vlc_media_player	videolan vlc media player	le	2.0.7
videolan:vlc_media_player	videolan vlc media player	eq	2.0.0
videolan:vlc_media_player	videolan vlc media player	eq	2.0.1
videolan:vlc_media_player	videolan vlc media player	eq	2.0.2
videolan:vlc_media_player	videolan vlc media player	eq	2.0.3
videolan:vlc_media_player	videolan vlc media player	eq	2.0.4
videolan:vlc_media_player	videolan vlc media player	eq	2.0.5
videolan:vlc_media_player	videolan vlc media player	eq	2.0.6