CVE-2019-5439: Buffer Overflow
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vlcto a version that resolves this vulnerability.Fixed in 3.0.23-0+deb12u1Fixed in 3.0.24-0+deb12u1Fixed in 3.0.23-0+deb13u1Fixed in 3.0.24-0+deb13u1Fixed in 3.0.24-4 - Upgrade
Upgrade
debian/vlcto a version that resolves this vulnerability.Fixed in 3.0.7-1
Event History
Frequently Asked Questions
What is CVE-2019-5439?
CVE-2019-5439 is a vulnerability in VLC Media Player < 3.0.7 that can cause a crash and potentially be developed into a remote code execution exploit.
What is the severity of CVE-2019-5439?
The severity of CVE-2019-5439 is medium, with a severity value of 6.5.
What software versions are affected by CVE-2019-5439?
VLC Media Player versions prior to 3.0.7 are affected by CVE-2019-5439.
How can I fix CVE-2019-5439?
To fix CVE-2019-5439, update VLC Media Player to version 3.0.7 or higher.
Where can I find more information about CVE-2019-5439?
You can find more information about CVE-2019-5439 in the references section of the vulnerability description.