CVE-2014-6440 VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
CriticalCVSS 9.8
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/vlc(Debian:12) | < 2.1.5-1 | 2.1.5-1 |
| debian/vlc(Debian:13) | < 2.1.5-1 | 2.1.5-1 |
| debian/vlc(Debian:14) | < 2.1.5-1 | 2.1.5-1 |
| videolan vlc | <= 2.1.4 | No fix listed |
References
- Debian Security Tracker CVE-2014-6440 vendor-advisory
- billblough.net exploit patch technical-description third-party-advisory
- [oss-security] 20150304 CVE-2014-6440: Heap Overflow in VLC Transcode Module mailing-list patch third-party-advisory vdb-entry
- 72950 third-party-advisory vdb-entry
- www.videolan.org release-notes vendor-advisory
- GLSA-201603-08 third-party-advisory vdb-entry vendor-advisory