CVEvulnerability

CVE-2013-6933

7.5 HIGH Published 2014-01-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119, CWE-189

Description

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.

Affected configurations

• live555 streaming media 2011-08-13 • live555 streaming media 2011-08-20 • live555 streaming media 2011-08-22 • live555 streaming media 2011-09-02 • live555 streaming media 2011-09-19 • live555 streaming media 2011-10-05 • live555 streaming media 2011-10-09 • live555 streaming media 2011-10-18 • live555 streaming media 2011-10-27 • live555 streaming media 2011-11-02 • live555 streaming media 2011-11-08 • live555 streaming media 2011-11-20 • live555 streaming media 2011-11-27 • live555 streaming media 2011-11-28 • live555 streaming media 2011-11-29 • live555 streaming media 2011-12-02 • live555 streaming media 2011-12-19 • live555 streaming media 2011-12-20 • live555 streaming media 2011-12-23 • live555 streaming media 2012-01-07 • live555 streaming media 2012-01-13 • live555 streaming media 2012-01-25 • live555 streaming media 2012-01-26 • live555 streaming media 2012-02-03 • live555 streaming media 2012-02-04 • live555 streaming media 2012-02-29 • live555 streaming media 2012-03-20 • live555 streaming media 2012-03-22 • live555 streaming media 2012-04-04 • live555 streaming media 2012-04-18 • live555 streaming media 2012-04-21 • live555 streaming media 2012-04-26 • live555 streaming media 2012-04-27 • live555 streaming media 2012-05-03 • live555 streaming media 2012-05-11 • live555 streaming media 2012-05-17 • live555 streaming media 2012-06-12 • live555 streaming media 2012-06-17 • live555 streaming media 2012-06-23 • live555 streaming media 2012-06-26 • live555 streaming media 2012-07-03 • live555 streaming media 2012-07-06 • live555 streaming media 2012-07-14 • live555 streaming media 2012-07-18 • live555 streaming media 2012-07-24 • live555 streaming media 2012-07-26 • live555 streaming media 2012-08-08 • live555 streaming media 2012-08-12 • live555 streaming media 2012-08-17 • live555 streaming media 2012-08-20 • live555 streaming media 2012-08-28 • live555 streaming media 2012-08-29 • live555 streaming media 2012-08-30 • live555 streaming media 2012-08-31 • live555 streaming media 2012-09-06 • live555 streaming media 2012-09-07 • live555 streaming media 2012-09-11 • live555 streaming media 2012-09-12 • live555 streaming media 2012-09-13 • live555 streaming media 2012-09-27 … and 88 more

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References