Lucene search

K
cve[email protected]CVE-2014-1684
HistoryMar 03, 2014 - 4:55 p.m.

CVE-2014-1684

2014-03-0316:55:04
CWE-189
web.nvd.nist.gov
21
vlc media player
asf
denial of service
cve-2014-1684
security
vulnerability
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.833 High

EPSS

Percentile

98.5%

The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.

Affected configurations

NVD
Node
videolanvlc_media_playerRange2.1.2
OR
videolanvlc_media_playerMatch1.0.0
OR
videolanvlc_media_playerMatch1.0.1
OR
videolanvlc_media_playerMatch1.0.2
OR
videolanvlc_media_playerMatch1.0.3
OR
videolanvlc_media_playerMatch1.0.4
OR
videolanvlc_media_playerMatch1.0.5
OR
videolanvlc_media_playerMatch1.0.6
OR
videolanvlc_media_playerMatch1.1.0
OR
videolanvlc_media_playerMatch1.1.1
OR
videolanvlc_media_playerMatch1.1.2
OR
videolanvlc_media_playerMatch1.1.3
OR
videolanvlc_media_playerMatch1.1.4
OR
videolanvlc_media_playerMatch1.1.4.1
OR
videolanvlc_media_playerMatch1.1.5
OR
videolanvlc_media_playerMatch1.1.6
OR
videolanvlc_media_playerMatch1.1.6.1
OR
videolanvlc_media_playerMatch1.1.7
OR
videolanvlc_media_playerMatch1.1.8
OR
videolanvlc_media_playerMatch1.1.9
OR
videolanvlc_media_playerMatch1.1.10
OR
videolanvlc_media_playerMatch1.1.10.1
OR
videolanvlc_media_playerMatch1.1.11
OR
videolanvlc_media_playerMatch1.1.12
OR
videolanvlc_media_playerMatch1.1.13
OR
videolanvlc_media_playerMatch2.0.0
OR
videolanvlc_media_playerMatch2.0.1
OR
videolanvlc_media_playerMatch2.0.2
OR
videolanvlc_media_playerMatch2.0.3
OR
videolanvlc_media_playerMatch2.0.4
OR
videolanvlc_media_playerMatch2.0.5
OR
videolanvlc_media_playerMatch2.0.6
OR
videolanvlc_media_playerMatch2.0.7
OR
videolanvlc_media_playerMatch2.0.8
OR
videolanvlc_media_playerMatch2.0.9
OR
videolanvlc_media_playerMatch2.1.0
OR
videolanvlc_media_playerMatch2.1.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.833 High

EPSS

Percentile

98.5%