CVE-2013-6933 The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (...
HighCVSS 7.5
EPSS 17.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/liblivemedia(Debian:14) | < 2014.01.13-1 | 2014.01.13-1 |
| debian/liblivemedia(Debian:14) | = 2004.11.11a-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2005.04.01-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2005.06.16-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2005.07.21-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2005.10.05-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2006.03.17-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2006.03.17-2 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2007.02.20-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2007.02.20-2 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2008.07.25-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2008.07.25-2 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2009.11.27-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2010.02.10-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2010.04.09-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2010.11.17-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.03.14-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.05.25-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.06.16-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.07.08-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.07.21-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.08.22-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.09.02-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2011.12.23-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.02.04-1 | No fix listed |
Show 173 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/liblivemedia(Debian:14) | = 2012.02.29-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.02.29-2 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.04.04-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.04.21-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.05.03-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.05.03-1~bpo60+1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.05.17-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.05.17-1+wheezy1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.05.17-1~bpo60+1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.08.31-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.10.24-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.11.16-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2012.11.30-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2013.01.05-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2013.01.05-2 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2013.01.05-3 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2013.01.15-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2013.04.30-1 | No fix listed |
| debian/liblivemedia(Debian:14) | = 2013.10.25-1 | No fix listed |
| debian/mplayer(Debian:12) | < 2:1.1.1+svn37434-1 | 2:1.1.1+svn37434-1 |
| debian/mplayer(Debian:13) | < 2:1.1.1+svn37434-1 | 2:1.1.1+svn37434-1 |
| debian/mplayer(Debian:14) | < 2:1.1.1+svn37434-1 | 2:1.1.1+svn37434-1 |
| debian/vlc(Debian:12) | < 2.1.4-1 | 2.1.4-1 |
| debian/vlc(Debian:13) | < 2.1.4-1 | 2.1.4-1 |
| debian/vlc(Debian:14) | < 2.1.4-1 | 2.1.4-1 |
| live555 streaming media | = 2011-08-13 | No fix listed |
| live555 streaming media | = 2011-08-20 | No fix listed |
| live555 streaming media | = 2011-08-22 | No fix listed |
| live555 streaming media | = 2011-09-02 | No fix listed |
| live555 streaming media | = 2011-09-19 | No fix listed |
| live555 streaming media | = 2011-10-05 | No fix listed |
| live555 streaming media | = 2011-10-09 | No fix listed |
| live555 streaming media | = 2011-10-18 | No fix listed |
| live555 streaming media | = 2011-10-27 | No fix listed |
| live555 streaming media | = 2011-11-02 | No fix listed |
| live555 streaming media | = 2011-11-08 | No fix listed |
| live555 streaming media | = 2011-11-20 | No fix listed |
| live555 streaming media | = 2011-11-27 | No fix listed |
| live555 streaming media | = 2011-11-28 | No fix listed |
| live555 streaming media | = 2011-11-29 | No fix listed |
| live555 streaming media | = 2011-12-02 | No fix listed |
| live555 streaming media | = 2011-12-19 | No fix listed |
| live555 streaming media | = 2011-12-20 | No fix listed |
| live555 streaming media | = 2011-12-23 | No fix listed |
| live555 streaming media | = 2012-01-07 | No fix listed |
| live555 streaming media | = 2012-01-13 | No fix listed |
| live555 streaming media | = 2012-01-25 | No fix listed |
| live555 streaming media | = 2012-01-26 | No fix listed |
| live555 streaming media | = 2012-02-03 | No fix listed |
| live555 streaming media | = 2012-02-04 | No fix listed |
| live555 streaming media | = 2012-02-29 | No fix listed |
| live555 streaming media | = 2012-03-20 | No fix listed |
| live555 streaming media | = 2012-03-22 | No fix listed |
| live555 streaming media | = 2012-04-04 | No fix listed |
| live555 streaming media | = 2012-04-18 | No fix listed |
| live555 streaming media | = 2012-04-21 | No fix listed |
| live555 streaming media | = 2012-04-26 | No fix listed |
| live555 streaming media | = 2012-04-27 | No fix listed |
| live555 streaming media | = 2012-05-03 | No fix listed |
| live555 streaming media | = 2012-05-11 | No fix listed |
| live555 streaming media | = 2012-05-17 | No fix listed |
| live555 streaming media | = 2012-06-12 | No fix listed |
| live555 streaming media | = 2012-06-17 | No fix listed |
| live555 streaming media | = 2012-06-23 | No fix listed |
| live555 streaming media | = 2012-06-26 | No fix listed |
| live555 streaming media | = 2012-07-03 | No fix listed |
| live555 streaming media | = 2012-07-06 | No fix listed |
| live555 streaming media | = 2012-07-14 | No fix listed |
| live555 streaming media | = 2012-07-18 | No fix listed |
| live555 streaming media | = 2012-07-24 | No fix listed |
| live555 streaming media | = 2012-07-26 | No fix listed |
| live555 streaming media | = 2012-08-08 | No fix listed |
| live555 streaming media | = 2012-08-12 | No fix listed |
| live555 streaming media | = 2012-08-17 | No fix listed |
| live555 streaming media | = 2012-08-20 | No fix listed |
| live555 streaming media | = 2012-08-28 | No fix listed |
| live555 streaming media | = 2012-08-29 | No fix listed |
| live555 streaming media | = 2012-08-30 | No fix listed |
| live555 streaming media | = 2012-08-31 | No fix listed |
| live555 streaming media | = 2012-09-06 | No fix listed |
| live555 streaming media | = 2012-09-07 | No fix listed |
| live555 streaming media | = 2012-09-11 | No fix listed |
| live555 streaming media | = 2012-09-12 | No fix listed |
| live555 streaming media | = 2012-09-13 | No fix listed |
| live555 streaming media | = 2012-09-27 | No fix listed |
| live555 streaming media | = 2012-10-01 | No fix listed |
| live555 streaming media | = 2012-10-04 | No fix listed |
| live555 streaming media | = 2012-10-11 | No fix listed |
| live555 streaming media | = 2012-10-12 | No fix listed |
| live555 streaming media | = 2012-10-16 | No fix listed |
| live555 streaming media | = 2012-10-17 | No fix listed |
| live555 streaming media | = 2012-10-18 | No fix listed |
| live555 streaming media | = 2012-10-21 | No fix listed |
| live555 streaming media | = 2012-10-22 | No fix listed |
| live555 streaming media | = 2012-10-24 | No fix listed |
| live555 streaming media | = 2012-11-05 | No fix listed |
| live555 streaming media | = 2012-11-08 | No fix listed |
| live555 streaming media | = 2012-11-16 | No fix listed |
| live555 streaming media | = 2012-11-17 | No fix listed |
| live555 streaming media | = 2012-11-22 | No fix listed |
| live555 streaming media | = 2012-11-28 | No fix listed |
| live555 streaming media | = 2012-11-29 | No fix listed |
| live555 streaming media | = 2012-11-30 | No fix listed |
| live555 streaming media | = 2012-12-15 | No fix listed |
| live555 streaming media | = 2012-12-18 | No fix listed |
| live555 streaming media | = 2012-12-21 | No fix listed |
| live555 streaming media | = 2012-12-22 | No fix listed |
| live555 streaming media | = 2012-12-23 | No fix listed |
| live555 streaming media | = 2012-12-24 | No fix listed |
| live555 streaming media | = 2013-01-03 | No fix listed |
| live555 streaming media | = 2013-01-04 | No fix listed |
| live555 streaming media | = 2013-01-05 | No fix listed |
| live555 streaming media | = 2013-01-15 | No fix listed |
| live555 streaming media | = 2013-01-18 | No fix listed |
| live555 streaming media | = 2013-01-19 | No fix listed |
| live555 streaming media | = 2013-01-21 | No fix listed |
| live555 streaming media | = 2013-01-22 | No fix listed |
| live555 streaming media | = 2013-01-23 | No fix listed |
| live555 streaming media | = 2013-01-25 | No fix listed |
| live555 streaming media | = 2013-02-05 | No fix listed |
| live555 streaming media | = 2013-02-11 | No fix listed |
| live555 streaming media | = 2013-02-27 | No fix listed |
| live555 streaming media | = 2013-03-07 | No fix listed |
| live555 streaming media | = 2013-03-23 | No fix listed |
| live555 streaming media | = 2013-03-31 | No fix listed |
| live555 streaming media | = 2013-04-01 | No fix listed |
| live555 streaming media | = 2013-04-04 | No fix listed |
| live555 streaming media | = 2013-04-05 | No fix listed |
| live555 streaming media | = 2013-04-06 | No fix listed |
| live555 streaming media | = 2013-04-08 | No fix listed |
| live555 streaming media | = 2013-04-16 | No fix listed |
| live555 streaming media | = 2013-04-21 | No fix listed |
| live555 streaming media | = 2013-04-22 | No fix listed |
| live555 streaming media | = 2013-04-23 | No fix listed |
| live555 streaming media | = 2013-04-29 | No fix listed |
| live555 streaming media | = 2013-04-30 | No fix listed |
| live555 streaming media | = 2013-05-30 | No fix listed |
| live555 streaming media | = 2013-06-06 | No fix listed |
| live555 streaming media | = 2013-06-14 | No fix listed |
| live555 streaming media | = 2013-06-18 | No fix listed |
| live555 streaming media | = 2013-06-30 | No fix listed |
| live555 streaming media | = 2013-07-03 | No fix listed |
| live555 streaming media | = 2013-07-16 | No fix listed |
| live555 streaming media | = 2013-07-30 | No fix listed |
| live555 streaming media | = 2013-07-31 | No fix listed |
| live555 streaming media | = 2013-08-05 | No fix listed |
| live555 streaming media | = 2013-08-15 | No fix listed |
| live555 streaming media | = 2013-08-16 | No fix listed |
| live555 streaming media | = 2013-08-28 | No fix listed |
| live555 streaming media | = 2013-08-31 | No fix listed |
| live555 streaming media | = 2013-09-07 | No fix listed |
| live555 streaming media | = 2013-09-08 | No fix listed |
| live555 streaming media | = 2013-09-11 | No fix listed |
| live555 streaming media | = 2013-09-18 | No fix listed |
| live555 streaming media | = 2013-09-27 | No fix listed |
| live555 streaming media | = 2013-09-30 | No fix listed |
| live555 streaming media | = 2013-10-01 | No fix listed |
| live555 streaming media | = 2013-10-02 | No fix listed |
| live555 streaming media | = 2013-10-03 | No fix listed |
| live555 streaming media | = 2013-10-07 | No fix listed |
| live555 streaming media | = 2013-10-08 | No fix listed |
| live555 streaming media | = 2013-10-09 | No fix listed |
| live555 streaming media | = 2013-10-11 | No fix listed |
| live555 streaming media | = 2013-10-16 | No fix listed |
| live555 streaming media | = 2013-10-18 | No fix listed |
| live555 streaming media | = 2013-10-22 | No fix listed |
| live555 streaming media | = 2013-10-24 | No fix listed |
| live555 streaming media | = 2013-10-25 | No fix listed |
| live555 streaming media | = 2013-11-06 | No fix listed |
| live555 streaming media | = 2013-11-10 | No fix listed |
| live555 streaming media | = 2013-11-14 | No fix listed |
| live555 streaming media | = 2013-11-15 | No fix listed |
| live555 streaming media | = 2013-11-25 | No fix listed |