VLC Media Player Meta-Information Denial Of Service Vulnerability (Windows) Network Vulnerability

Summary

The host is installed with VLC Media Player and is prone to Denial of Service vulnerability.

Impact

Successful exploitation could allow attackers to crash the affected application, denying service to legitimate users. Impact Level: Application

Solution

Upgrade to the VLC media player version 1.1.3 or later, For updates refer to http://www.videolan.org/vlc/

Insight

The flaw is due to an input validation error when trying to extract meta-informations about input media through 'ID3v2' tags.

Affected

VLC media player version prior to 1.1.3 on Windows.

References

Updated on 2015-03-25

Severity

Classification

CVSS	Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Related Vulnerabilities

VLC Media Player Meta-Information Denial of Service Vulnerability (Windows)