4.3
CVSSv2

CVE-2014-3441

Published: 14/05/2014 Updated: 15/05/2014
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote malicious users to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file.

Vulnerable Product Search on Vulmon Subscribe to Product

videolan vlc media player 2.1.3

Exploits

source: wwwsecurityfocuscom/bid/67315/info VLC Media Player is prone to a memory-corruption vulnerability Attackers can exploit this issue to cause a denial-of-service condition Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed VLC Media Player 213 is vulnerable; other version ...