high7.5Public exploit code
CVE-2013-6283
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)2013-08-19 · dos · windows · Verified
Impact
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Videolan | Vlc Media Player | through 2.0.8 Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/27700
- http://www.osvdb.org/96603
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19318
- http://www.exploit-db.com/exploits/27700
- http://www.osvdb.org/96603
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19318