CVE-2013-6933
CVE-2013-6933
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.
EPSS 17.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
liblivemedia Debian:14
- Versions
- 2004.11.11a-1
- 2005.04.01-1
- 2005.06.16-1
- 2005.07.21-1
- 2005.10.05-1
- 2006.03.17-1
- 2006.03.17-2
- 2007.02.20-1
- 2007.02.20-2
- 2008.07.25-1
- 2008.07.25-2
- 2009.11.27-1
- 2010.02.10-1
- 2010.04.09-1
- 2010.11.17-1
- 2011.03.14-1
- 2011.05.25-1
- 2011.06.16-1
- 2011.07.08-1
- 2011.07.21-1
- 2011.08.22-1
- 2011.09.02-1
- 2011.12.23-1
- 2012.02.04-1
- 2012.02.29-1
- 2012.02.29-2
- 2012.04.04-1
- 2012.04.21-1
- 2012.05.03-1
- 2012.05.03-1~bpo60+1
- 2012.05.17-1
- 2012.05.17-1+wheezy1
- 2012.05.17-1~bpo60+1
- 2012.08.31-1
- 2012.10.24-1
- 2012.11.16-1
- 2012.11.30-1
- 2013.01.05-1
- 2013.01.05-2
- 2013.01.05-3
- 2013.01.15-1
- 2013.04.30-1
- 2013.10.25-1
- Affected ranges
- ECOSYSTEM: < 2014.01.13-1
Update to 2014.01.13-1
mplayer Debian:12
- Affected ranges
- ECOSYSTEM: < 2:1.1.1+svn37434-1
Update to 2:1.1.1+svn37434-1
mplayer Debian:13
- Affected ranges
- ECOSYSTEM: < 2:1.1.1+svn37434-1
Update to 2:1.1.1+svn37434-1
mplayer Debian:14
- Affected ranges
- ECOSYSTEM: < 2:1.1.1+svn37434-1
Update to 2:1.1.1+svn37434-1
vlc Debian:12
- Affected ranges
- ECOSYSTEM: < 2.1.4-1
Update to 2.1.4-1
vlc Debian:13
- Affected ranges
- ECOSYSTEM: < 2.1.4-1
Update to 2.1.4-1
vlc Debian:14
- Affected ranges
- ECOSYSTEM: < 2.1.4-1
Update to 2.1.4-1