Lucene search

K
cve[email protected]CVE-2014-3441
HistoryMay 14, 2014 - 7:55 p.m.

CVE-2014-3441

2014-05-1419:55:13
CWE-119
web.nvd.nist.gov
33
vlc
media player
2.1.3
remote code execution
vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.265 Low

EPSS

Percentile

96.8%

codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file.

Affected configurations

NVD
Node
videolanvlc_media_playerMatch2.1.3

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.265 Low

EPSS

Percentile

96.8%