CVE-2014-9743
Description
Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info.
Risk Information
Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.256
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities affected in VLC Media Player (X64) 2.1.6 | Windows |
| Multiple vulnerabilities affected in VLC Media Player 2.1.6 | Windows |
| Vulnerabilities CVE-2014-9743,CVE-2016-3941 are affected in VLC Media Player (MSI) (x64) 2.1.6 | Windows |
| Vulnerabilities CVE-2014-9743,CVE-2016-3941 are affected in VLC media player (MSI) 2.1.6 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-339135 | VLC Media Player (X64) (3.0.21) |
| PATCH-339134 | VLC Media Player (3.0.21) |
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234