KLA10008 Denial of Service in VideoLAN VLC Media Player

An unspecified vulnerability was found in VLC versions 2.1.3 and earlier. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network through a specially designed .png file. It is caused by codeclibpng_plugin.dll.

Original advisories

NVD

Related products

VLC-media-player

CVE list

CVE-2014-3441 warning

Solution

Update to latest version

VLC

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• VideoLAN VLC Media Player 2.1.3