CVE-2013-7340: Medium severity Videolan VLC Media Player vulnerability
Published Mar 20, 2014
·Updated
VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file.
Affected Software
105 affected components
Videolan VLC Media Player<=2.0.6
Videolan VLC Media Player=0.1.99a
Videolan VLC Media Player=0.1.99b
Videolan VLC Media Player=0.1.99c
Videolan VLC Media Player=0.1.99d
Videolan VLC Media Player=0.1.99e
Videolan VLC Media Player=0.1.99f
Videolan VLC Media Player=0.1.99g
Videolan VLC Media Player=0.1.99h
Videolan VLC Media Player=0.1.99i
Videolan VLC Media Player=0.2.0
Videolan VLC Media Player=0.2.50
Videolan VLC Media Player=0.2.60
Videolan VLC Media Player=0.2.61
Videolan VLC Media Player=0.2.62
Videolan VLC Media Player=0.2.63
Videolan VLC Media Player=0.2.70
Videolan VLC Media Player=0.2.71
Videolan VLC Media Player=0.2.72
Videolan VLC Media Player=0.2.73
Videolan VLC Media Player=0.2.80
Videolan VLC Media Player=0.2.81
Videolan VLC Media Player=0.2.82
Videolan VLC Media Player=0.2.83
Videolan VLC Media Player=0.2.90
Videolan VLC Media Player=0.2.91
Videolan VLC Media Player=0.2.92
Videolan VLC Media Player=0.3.0
Videolan VLC Media Player=0.3.1
Videolan VLC Media Player=0.4.0
Videolan VLC Media Player=0.4.1
Videolan VLC Media Player=0.4.2
Videolan VLC Media Player=0.4.3
Videolan VLC Media Player=0.4.3-ac3
Videolan VLC Media Player=0.4.4
Videolan VLC Media Player=0.4.5
Videolan VLC Media Player=0.4.6
Videolan VLC Media Player=0.5.0
Videolan VLC Media Player=0.5.1
Videolan VLC Media Player=0.5.2
Videolan VLC Media Player=0.5.3
Videolan VLC Media Player=0.6.0
Videolan VLC Media Player=0.6.1
Videolan VLC Media Player=0.6.2
Videolan VLC Media Player=0.7.0
Videolan VLC Media Player=0.7.1
Videolan VLC Media Player=0.7.2
Videolan VLC Media Player=0.8.0
Videolan VLC Media Player=0.8.1
Videolan VLC Media Player=0.8.2
Videolan VLC Media Player=0.8.4
Videolan VLC Media Player=0.8.4a
Videolan VLC Media Player=0.8.5
Videolan VLC Media Player=0.8.6
Videolan VLC Media Player=0.8.6a
Videolan VLC Media Player=0.8.6b
Videolan VLC Media Player=0.8.6c
Videolan VLC Media Player=0.8.6d
Videolan VLC Media Player=0.8.6e
Videolan VLC Media Player=0.8.6f
Videolan VLC Media Player=0.8.6g
Videolan VLC Media Player=0.8.6h
Videolan VLC Media Player=0.8.6i
Videolan VLC Media Player=0.8.1337
Videolan VLC Media Player=0.9.0
Videolan VLC Media Player=0.9.1
Videolan VLC Media Player=0.9.2
Videolan VLC Media Player=0.9.3
Videolan VLC Media Player=0.9.4
Videolan VLC Media Player=0.9.5
Videolan VLC Media Player=0.9.6
Videolan VLC Media Player=0.9.8a
Videolan VLC Media Player=0.9.9
Videolan VLC Media Player=0.9.9a
Videolan VLC Media Player=0.9.10
Videolan VLC Media Player=1.0.0
Videolan VLC Media Player=1.0.1
Videolan VLC Media Player=1.0.2
Videolan VLC Media Player=1.0.3
Videolan VLC Media Player=1.0.4
Videolan VLC Media Player=1.0.5
Videolan VLC Media Player=1.0.6
Videolan VLC Media Player=1.1.0
Videolan VLC Media Player=1.1.1
Videolan VLC Media Player=1.1.2
Videolan VLC Media Player=1.1.3
Videolan VLC Media Player=1.1.4
Videolan VLC Media Player=1.1.4.1
Videolan VLC Media Player=1.1.5
Videolan VLC Media Player=1.1.6
Videolan VLC Media Player=1.1.6.1
Videolan VLC Media Player=1.1.7
Videolan VLC Media Player=1.1.8
Videolan VLC Media Player=1.1.9
Videolan VLC Media Player=1.1.10
Videolan VLC Media Player=1.1.10.1
Videolan VLC Media Player=1.1.11
Videolan VLC Media Player=1.1.12
Videolan VLC Media Player=1.1.13
Videolan VLC Media Player=2.0.0
Videolan VLC Media Player=2.0.1
Videolan VLC Media Player=2.0.2
Videolan VLC Media Player=2.0.3
Videolan VLC Media Player=2.0.4
Videolan VLC Media Player=2.0.5
Event History
Mar 20, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Mar 21, 2014
Data Sourced
via NVD·04:38 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7340?
CVE-2013-7340 has a medium severity rating as it allows remote attackers to cause a denial of service through memory consumption.
2
How do I fix CVE-2013-7340?
To resolve CVE-2013-7340, upgrade to VLC Media Player version 2.0.7 or later.
3
What versions of VLC Media Player are affected by CVE-2013-7340?
VLC Media Player versions before 2.0.7, including earlier versions like 0.1.99a to 0.2.6, are affected by CVE-2013-7340.
4
What impact does CVE-2013-7340 have on VLC Media Player users?
Users of VLC Media Player affected by CVE-2013-7340 may experience unexpected crashes or slow performance due to increased memory usage from crafted playlist files.
5
Can CVE-2013-7340 be exploited remotely?
Yes, CVE-2013-7340 can be exploited by remote attackers through specially crafted playlist files.