CVE-2013-6283 in VideoLAN VLC Media Player

Summary

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.

Reservation

10/25/2013

Disclosure

10/25/2013

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
65359	VideoLAN VLC Media Player m3u File input validation	20	Proof-of-Concept	Not defined	CVE-2013-6283
10074	VideoLAN VLC Media Player M3U input validation	20	Proof-of-Concept	Official fix	CVE-2013-6283