CVE-2014-6440

Опубликовано: 28 мар. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

Ссылки

http://billblough.net/blog/2015/03/04/cve-2014-6440-heap-overflow-in-vlc-transcode-module/
Exploit
Patch
Technical Description
Third Party Advisory
http://seclists.org/oss-sec/2015/q1/751
Patch
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/72950
Third Party Advisory
VDB Entry
http://www.videolan.org/developers/vlc-branch/NEWS
Release Notes
Vendor Advisory
https://security.gentoo.org/glsa/201603-08
Third Party Advisory
VDB Entry
http://billblough.net/blog/2015/03/04/cve-2014-6440-heap-overflow-in-vlc-transcode-module/
Exploit
Patch
Technical Description
Third Party Advisory
http://seclists.org/oss-sec/2015/q1/751
Patch
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/72950
Third Party Advisory
VDB Entry
http://www.videolan.org/developers/vlc-branch/NEWS
Release Notes
Vendor Advisory
https://security.gentoo.org/glsa/201603-08
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:videolan:vlc:*:*:*:*:*:*:*:*

Версия до 2.1.4 (включая)

EPSS

Процентиль: 90%

0.05344

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2014-6440

CVSS3: 9.8

ubuntu

почти 9 лет назад

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

CVE-2014-6440

CVSS3: 9.8

debian

почти 9 лет назад

VideoLAN VLC media player before 2.1.5 allows remote attackers to exec ...

GHSA-hgvf-qfh8-3x8f

CVSS3: 9.8

github

больше 3 лет назад

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

EPSS

Процентиль: 90%

0.05344

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119