VideoLAN VLC CVE-2019-13962 Heap Based Buffer Overflow Vulnerability
BID:109306
CVE-2019-13962 |Info
VideoLAN VLC CVE-2019-13962 Heap Based Buffer Overflow Vulnerability
| Bugtraq ID: | 109306 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2019-13962 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 18 2019 12:00AM |
| Updated: | Jul 18 2019 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
VideoLAN VLC media player 3.0.7 VideoLAN VLC media player 3.0.6 VideoLAN VLC media player 3.0.5 VideoLAN VLC media player 3.0.4 VideoLAN VLC media player 3.0.3 VideoLAN VLC media player 3.0.2 VideoLAN VLC media player 3.0.1 VideoLAN VLC media player 3.0 VideoLAN VLC media player 2.2.8 VideoLAN VLC media player 2.2.1 VideoLAN VLC media player 2.2 VideoLAN VLC media player 2.1.5 VideoLAN VLC media player 2.1 VideoLAN VLC media player 2.0.9 VideoLAN VLC media player 2.0.8 VideoLAN VLC media player 2.0.7 VideoLAN VLC media player 2.0.6 VideoLAN VLC media player 2.0.5 VideoLAN VLC media player 2.0.4 VideoLAN VLC media player 2.0.2 VideoLAN VLC media player 2.0.1 VideoLAN VLC media player 2.0 VideoLAN VLC media player 1.2 VideoLAN VLC media player 1.1.13 VideoLAN VLC media player 1.1.12 VideoLAN VLC media player 1.1.9 VideoLAN VLC media player 1.1.8 VideoLAN VLC media player 1.1.7 VideoLAN VLC media player 1.1.6 1 VideoLAN VLC media player 1.1.4 VideoLAN VLC media player 1.1.3 VideoLAN VLC media player 1.1.2 VideoLAN VLC media player 1.1.1 VideoLAN VLC media player 1.1 VideoLAN VLC media player 1.0.6 VideoLAN VLC media player 1.0.5 VideoLAN VLC media player 1.0.3 VideoLAN VLC media player 1.0.2 VideoLAN VLC media player 1.0.1 VideoLAN VLC media player 1.0 VideoLAN VLC media player 0.9.9 VideoLAN VLC media player 0.9.7 VideoLAN VLC media player 0.9.6 VideoLAN VLC media player 0.9.5 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoLAN VLC media player 0.9 VideoLAN VLC media player 0.8.8 VideoLAN VLC media player 0.8.7 VideoLAN VLC media player 0.8.6 VideoLAN VLC media player 0.6.8 VideoLAN VLC media player 0.5 VideoLAN VLC media player 0.1.13 VideoLAN VLC media player 2.2.5 VideoLAN VLC media player 2.2.4 VideoLAN VLC media player 2.2.3 VideoLAN VLC media player 2.2.2 VideoLAN VLC media player 2.1.6 VideoLAN VLC media player 2.1.5.0 VideoLAN VLC media player 2.1.3 VideoLAN VLC media player 2.1.2 VideoLAN VLC media player 2.1.1 VideoLAN VLC media player 2.0.3 VideoLAN VLC media player 1.1.6 VideoLAN VLC media player 1.1.5 VideoLAN VLC media player 1.1.4.1 VideoLAN VLC media player 1.1.11 VideoLAN VLC media player 1.1.10.1 VideoLAN VLC media player 1.1.10 VideoLAN VLC media player 1.0.4 VideoLAN VLC media player 0.9.9A VideoLAN VLC media player 0.9.8a VideoLAN VLC media player 0.7.1 VideoLAN VLC media player 0.2.50 |
| Not Vulnerable: | |
Discussion
VideoLAN VLC CVE-2019-13962 Heap Based Buffer Overflow Vulnerability
VideoLAN VLC is prone to a heap-based buffer-overflow vulnerability.
Attackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. Given the nature of this issue, attackers may also be able to execute arbitrary code, but this has not been confirmed.
VideoLAN VLC Media Player version 3.0.7 and prior are vulnerable; other versions may also be affected.
VideoLAN VLC is prone to a heap-based buffer-overflow vulnerability.
Attackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. Given the nature of this issue, attackers may also be able to execute arbitrary code, but this has not been confirmed.
VideoLAN VLC Media Player version 3.0.7 and prior are vulnerable; other versions may also be affected.
Exploit / POC
VideoLAN VLC CVE-2019-13962 Heap Based Buffer Overflow Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
VideoLAN VLC CVE-2019-13962 Heap Based Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.