CVE-2014-1684

보통 4.3CVE-2014-1684 · Published 03/03/2014 · updated 17/06/2026

요약

CVE-2014-1684은(는) vlc media player (videolan)에 영향을 주는 보통 (CVSS 4.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 5.2%, 전체 취약점의 92.5%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
vlc media player videolan	`= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.1.0= 1.1.1= 1.1.10= 1.1.10.1= 1.1.11= 1.1.12= 1.1.13= 1.1.2= 1.1.3= 1.1.4= 1.1.4.1= 1.1.5= 1.1.6= 1.1.6.1= 1.1.7= 1.1.8= 1.1.9= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.1.0= 2.1.1≤ 2.1.2`	No fix yet

Description

The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.

References

git.videolan.org/gitweb.cgi/vlc.git
elsherei.com · Exploit
security.gentoo.org/glsa/201603-08
trac.videolan.org/vlc/ticket/10482 · Exploit

vlc media player의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

vlc media player

videolan

= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.1.0= 1.1.1= 1.1.10= 1.1.10.1= 1.1.11= 1.1.12= 1.1.13= 1.1.2= 1.1.3= 1.1.4= 1.1.4.1= 1.1.5= 1.1.6= 1.1.6.1= 1.1.7= 1.1.8= 1.1.9= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.1.0= 2.1.1≤ 2.1.2

No fix yet

vlc media player의 다른 취약점

모두 보기 →