CVE-2014-9628

The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended…

published January 24, 2020

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended zero-size malloc and conduct buffer overflow attacks, and consequently execute arbitrary code, via a box size of 7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02162 · 82.0th percentile
Published
2020-01-24T21:57Z
EPSS history
Timeline
  • 24 JAN 21:57Z
    The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to trigger an unintended…
    cvelistv5