Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2019-19721
HistoryMay 15, 2020 - 6:15 p.m.

CVE-2019-19721

2020-05-1518:15:00
CWE-787
CWE-193
[email protected]
web.nvd.nist.gov
124
cve-2019-19721
off-by-one error
decodeblock function
codec
sdl_image.c
videolan
vlc media player
memory corruption
denial of service
crafted image file
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.4%

JSON

An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.

Related

openvas 6
nessus 4
ubuntucve 1
prion 1
veracode 1
freebsd 1
gentoo 1
kaspersky 1
osv 3
debiancve 1
alpinelinux 1
redos 12
ubuntu 1
mageia 1
openvas
openvas
VLC Media Player < 3.0.9 DoS Vulnerability - Linux
2020-05-19 00:00:00
VLC Media Player < 3.0.9 DoS Vulnerability - Windows
2020-05-19 00:00:00
VLC Media Player < 3.0.9 DoS Vulnerability - Mac OS X
2020-05-19 00:00:00
nessus
nessus
FreeBSD : vlc -- Multiple vulnerabilities fixed in VLC media player (4a10902f-8a48-11ea-8668-e0d55e2a8bf9)
2020-04-30 00:00:00
GLSA-202005-11 : VLC: Buffer overflow
2020-05-15 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)
2023-06-20 00:00:00
ubuntucve
ubuntucve
CVE-2019-19721
2020-05-15 00:00:00
prion
prion
Memory corruption
2020-05-15 18:15:00
veracode
veracode
Decoder Error
2021-04-29 11:59:14
freebsd
freebsd
vlc -- Multiple vulnerabilities fixed in VLC media player
2020-04-01 00:00:00
gentoo
gentoo
VLC: Buffer overflow
2020-05-14 00:00:00
kaspersky
kaspersky
KLA11760 DoS in VLC media player
2020-04-29 00:00:00
osv
osv
CVE-2019-19721
2020-05-15 18:15:13
vlc vulnerabilities
2023-06-20 19:47:23
vlc - security update
2020-04-30 00:00:00
debiancve
debiancve
CVE-2019-19721
2020-05-15 18:15:00
alpinelinux
alpinelinux
CVE-2019-19721
2020-05-15 18:15:00
redos
redos
ROS-2-639
2021-12-24 00:00:00
ROS-2-570
2021-09-08 00:00:00
ROS-2-614
2021-09-08 00:00:00
ubuntu
ubuntu
VLC media player vulnerabilities
2023-06-20 00:00:00
mageia
mageia
Updated vlc packages fix security vulnerabilities
2020-05-08 13:57:54

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.4%

JSON
Related for CVE-2019-19721
openvas6nessus4ubuntucve1prion1veracode1freebsd1gentoo1kaspersky1osv3debiancve1alpinelinux1redos12ubuntu1mageia1