CVE-2014-9627: Incorrect Type Cast
Published Jan 24, 2020
·Updated
The MP4ReadBoxString function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size.
Affected Software
1 affected component
Videolan VLC Media Player<2.1.6
Remediation
Patch Available
Event History
Jan 24, 2020
CVE Published
via MITRE·09:57 PM
Data Sourced
via MITRE·09:57 PM
Description
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2014-9627.
2
What is the severity of CVE-2014-9627?
The severity of CVE-2014-9627 is high with a severity value of 7.8.
3
How does CVE-2014-9627 impact VideoLAN VLC media player?
CVE-2014-9627 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box.
4
How can I fix CVE-2014-9627 in VideoLAN VLC media player?
To fix CVE-2014-9627 in VideoLAN VLC media player, upgrade to version 2.1.6 or later.
5
Where can I find more information about CVE-2014-9627?
You can find more information about CVE-2014-9627 at the following references: [1] [2] [3]