NetSight
IP …
critical9.3Public exploit code

CVE-2013-1868

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.

Affected products

VendorProductAffected versions
VideolanVlc Media Player
through 2.0.4
Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3

Weakness classification

CWE-119

References