Lucene search

K
cve[email protected]CVE-2014-9597
HistoryJan 21, 2015 - 3:17 p.m.

CVE-2014-9597

2015-01-2115:17:00
CWE-20
web.nvd.nist.gov
34
cve-2014-9597
videolan
vlc media player
remote code execution
denial of service
dep violation
application crash
flv file

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.122 Low

EPSS

Percentile

95.4%

The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (DEP violation and application crash) via a crafted FLV file.

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.122 Low

EPSS

Percentile

95.4%