CVE-2014-1684

Description

The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
12.75

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in VLC Media Player (X64) 2.1.2Windows
Multiple vulnerabilities affected in VLC Media Player 2.1.2Windows
Multiple Vulnerabilities are affected in VLC Media Player (X64) 2.0.6Windows
Vulnerabilities CVE-2013-3245,CVE-2013-4388,CVE-2013-6283,CVE-2014-1684 are affected in VLC Media Player (X64) 2.0.7Windows
Multiple Vulnerabilities are affected in VLC Media Player 2.0.6Windows
Vulnerabilities CVE-2013-3245,CVE-2013-4388,CVE-2013-6283,CVE-2014-1684 are affected in VLC Media Player 2.0.7Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.0Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.1Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.2Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.3Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.4Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.5Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.0Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.1Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.2Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.3Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.4Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.5Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.0.6Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.0Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.1Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.2Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.0.6Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.0Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.1Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.2Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.3Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.3Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.4Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.5Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.6Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.6.1Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.7Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.4Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.5Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.6Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.6.1Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.7Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.8Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.8Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.4.1Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.9Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.4.1Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.9Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.10Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.10.1Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.10Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.10.1Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.11Windows
Vulnerabilities CVE-2012-0023,CVE-2013-6283,CVE-2013-7340,CVE-2014-1684 are affected in VLC Media Player (MSI) (x64) 1.1.12Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.11Windows
Vulnerabilities CVE-2012-0023,CVE-2013-6283,CVE-2013-7340,CVE-2014-1684 are affected in VLC media player (MSI) 1.1.12Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 1.1.13Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 2.0.0Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 1.1.13Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 2.0.0Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 2.0.1Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 2.0.1Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 2.0.3Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 2.0.3Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 2.0.2Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 2.0.4Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 2.0.2Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 2.0.4Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 2.0.5Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 2.0.5Windows
Vulnerabilities CVE-2013-3245,CVE-2013-4388,CVE-2013-6283,CVE-2014-1684 are affected in VLC Media Player (MSI) (x64) 2.0.7Windows
Vulnerabilities CVE-2013-3245,CVE-2013-4388,CVE-2013-6283,CVE-2014-1684 are affected in VLC media player (MSI) 2.0.7Windows
Multiple Vulnerabilities are affected in VLC Media Player (MSI) (x64) 2.0.6Windows
Multiple Vulnerabilities are affected in VLC media player (MSI) 2.0.6Windows
Vulnerabilities CVE-2013-6283,CVE-2014-1684 are affected in VLC Media Player (MSI) (x64) 2.0.8Windows
Vulnerabilities CVE-2013-6283,CVE-2014-1684 are affected in VLC media player (MSI) 2.0.8Windows
Vulnerabilities CVE-2013-6934,CVE-2014-1684 are affected in VLC Media Player (MSI) (x64) 2.0.9Windows
Vulnerabilities CVE-2013-6934,CVE-2014-1684 are affected in VLC media player (MSI) 2.0.9Windows
Vulnerabilities CVE-2014-1684 are affected in VLC Media Player (MSI) (x64) 2.1.0Windows
Vulnerabilities CVE-2014-1684 are affected in VLC Media Player (MSI) (x64) 2.1.1Windows
Vulnerabilities CVE-2014-1684 are affected in VLC Media Player (MSI) (x64) 2.1.2Windows
Vulnerabilities CVE-2014-1684 are affected in VLC media player (MSI) 2.1.0Windows
Vulnerabilities CVE-2014-1684 are affected in VLC media player (MSI) 2.1.1Windows
Vulnerabilities CVE-2014-1684 are affected in VLC media player (MSI) 2.1.2Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-339135VLC Media Player (X64) (3.0.21)
PATCH-339134VLC Media Player (3.0.21)
PATCH-327882VLC Media Player (X64) (3.0.18)
PATCH-327882VLC Media Player (X64) (3.0.18)
PATCH-327878VLC Media Player (3.0.18)
PATCH-327878VLC Media Player (3.0.18)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334048VLC media player (MSI) (x64) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)
PATCH-334050VLC media player (MSI) (3.0.20.0)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234