NetSight
IP …
medium4.3Public exploit code

CVE-2014-1684

The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.

Affected products

VendorProductAffected versions
VideolanVlc Media Player
through 2.1.2
Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-189

References