CVE-2013-7340

Опубликовано: 21 мар. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Уязвимость DoS атаки в VideoLAN VLC Media Player через неконтролируемое потребление памяти при обработке скомпрометированного плейлиста

Описание

В версии VideoLAN VLC Media Player до 2.0.7 существует уязвимость, позволяющая злоумышленникам вызвать DoS атаку путём неконтролируемого потребления памяти. Это происходит при обработке специально сформированного файла плейлиста.

Затронутые версии ПО

VideoLAN VLC Media Player до версии 2.0.7

Тип уязвимости

DoS атака (неконтролируемое потребление памяти)

Ссылки

http://www.videolan.org/developers/vlc-branch/NEWS
Vendor Advisory
http://www.videolan.org/developers/vlc-branch/NEWS
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*

Версия до 2.0.6 (включая)

cpe:2.3:a:videolan:vlc_media_player:0.1.99a:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99b:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99c:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99d:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99e:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99f:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99g:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99h:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.1.99i:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.50:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.60:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.61:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.62:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.63:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.70:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.71:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.72:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.73:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.80:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.81:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.82:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.83:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.90:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.91:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.2.92:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.3.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.3:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.3-ac3:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.4:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.5:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.4.6:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.6.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.7.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.4:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.4a:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.5:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6a:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6b:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6c:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6d:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6e:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6f:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6g:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6h:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.6i:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.8.1337:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.4:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.5:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.6:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.8a:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.9:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.9a:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:0.9.10:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.9:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.10:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.10.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.11:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:1.1.13:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:videolan:vlc_media_player:2.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00443

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2013-7340

ubuntu

почти 12 лет назад

VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.

CVE-2013-7340

debian

почти 12 лет назад

VideoLAN VLC Media Player before 2.0.7 allows remote attackers to caus ...

GHSA-ggjx-vg8c-fm5c

github

больше 3 лет назад

VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.

EPSS

Процентиль: 63%

0.00443

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399