USN-4131-1: VLC vulnerabilities
It was discovered that VLC incorrectly handled certain media files. If a user were tricked into opening a specially-crafted file, a remote attacker could use this issue to cause VLC to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this VLC vulnerability?
The vulnerability ID for this VLC vulnerability is CVE-2019-13962, CVE-2019-14437, and CVE-2019-14438.
What is the severity of the VLC vulnerability?
The severity of the VLC vulnerability is not specified.
How can a remote attacker exploit this VLC vulnerability?
A remote attacker can exploit this VLC vulnerability by tricking a user into opening a specially-crafted media file, which can cause VLC to crash or execute arbitrary code.
Which versions of VLC are affected by this vulnerability?
VLC version 3.0.8-0ubuntu19.04.1 and 3.0.8-0ubuntu18.04.1 are affected by this vulnerability.
How can I fix the VLC vulnerability?
To fix the VLC vulnerability, update to version 3.0.8-0ubuntu19.04.1 if you are using Ubuntu 19.04, or update to version 3.0.8-0ubuntu18.04.1 if you are using Ubuntu 18.04.