CVEvulnerability
CVE-2013-6933
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119, CWE-189
Description
The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.
Affected configurations
• live555 streaming media 2011-08-13
• live555 streaming media 2011-08-20
• live555 streaming media 2011-08-22
• live555 streaming media 2011-09-02
• live555 streaming media 2011-09-19
• live555 streaming media 2011-10-05
• live555 streaming media 2011-10-09
• live555 streaming media 2011-10-18
• live555 streaming media 2011-10-27
• live555 streaming media 2011-11-02
• live555 streaming media 2011-11-08
• live555 streaming media 2011-11-20
• live555 streaming media 2011-11-27
• live555 streaming media 2011-11-28
• live555 streaming media 2011-11-29
• live555 streaming media 2011-12-02
• live555 streaming media 2011-12-19
• live555 streaming media 2011-12-20
• live555 streaming media 2011-12-23
• live555 streaming media 2012-01-07
• live555 streaming media 2012-01-13
• live555 streaming media 2012-01-25
• live555 streaming media 2012-01-26
• live555 streaming media 2012-02-03
• live555 streaming media 2012-02-04
• live555 streaming media 2012-02-29
• live555 streaming media 2012-03-20
• live555 streaming media 2012-03-22
• live555 streaming media 2012-04-04
• live555 streaming media 2012-04-18
• live555 streaming media 2012-04-21
• live555 streaming media 2012-04-26
• live555 streaming media 2012-04-27
• live555 streaming media 2012-05-03
• live555 streaming media 2012-05-11
• live555 streaming media 2012-05-17
• live555 streaming media 2012-06-12
• live555 streaming media 2012-06-17
• live555 streaming media 2012-06-23
• live555 streaming media 2012-06-26
• live555 streaming media 2012-07-03
• live555 streaming media 2012-07-06
• live555 streaming media 2012-07-14
• live555 streaming media 2012-07-18
• live555 streaming media 2012-07-24
• live555 streaming media 2012-07-26
• live555 streaming media 2012-08-08
• live555 streaming media 2012-08-12
• live555 streaming media 2012-08-17
• live555 streaming media 2012-08-20
• live555 streaming media 2012-08-28
• live555 streaming media 2012-08-29
• live555 streaming media 2012-08-30
• live555 streaming media 2012-08-31
• live555 streaming media 2012-09-06
• live555 streaming media 2012-09-07
• live555 streaming media 2012-09-11
• live555 streaming media 2012-09-12
• live555 streaming media 2012-09-13
• live555 streaming media 2012-09-27
… and 88 more
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html isecpartners.github.io
- http://www.live555.com/liveMedia/public/changelog.txt www.live555.com
- http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html isecpartners.github.io
- http://www.live555.com/liveMedia/public/changelog.txt www.live555.com