CVE-2013-4388: Buffer Overflow
Published Oct 11, 2013
·Updated
Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Affected Software
8 affected components
Videolan VLC Media Player<=2.0.7
Videolan VLC Media Player=2.0.0
Videolan VLC Media Player=2.0.1
Videolan VLC Media Player=2.0.2
Videolan VLC Media Player=2.0.3
Videolan VLC Media Player=2.0.4
Videolan VLC Media Player=2.0.5
Videolan VLC Media Player=2.0.6
Remediation
Event History
Oct 11, 2013
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4388?
CVE-2013-4388 is considered a critical vulnerability as it allows for remote code execution and denial of service.
2
How do I fix CVE-2013-4388?
To fix CVE-2013-4388, upgrade VLC Media Player to version 2.0.8 or later.
3
What versions of VLC Media Player are affected by CVE-2013-4388?
CVE-2013-4388 affects VLC Media Player versions prior to 2.0.8, including all versions from 2.0.0 to 2.0.7.
4
What type of vulnerability is CVE-2013-4388?
CVE-2013-4388 is a buffer overflow vulnerability found in the mp4a packetizer of VLC Media Player.
5
Can CVE-2013-4388 lead to arbitrary code execution?
Yes, CVE-2013-4388 has the potential to allow remote attackers to execute arbitrary code on affected systems.