VLC Media Player Meta-Information Denial of Service Vulnerability (Linux)

  1. Network Vulnerabilities
  2. Denial of Service
  3. VLC Media Player Meta-Information Denial of Service Vulnerability (Linux)
Summary
The host is installed with VLC Media Player and is prone to Denial of Service vulnerability.
Impact
Successful exploitation could allow attackers to crash the affected application, denying service to legitimate users. Impact Level: Application
Solution
Upgrade to the VLC media player version 1.1.3 or later, For updates refer to http://www.videolan.org/vlc/
Insight
The flaw is due to an input validation error when trying to extract meta-informations about input media through 'ID3v2' tags.
Affected
VLC media player version prior to 1.1.3 on Linux.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities