Buffer overflow in Live555 Streaming_media

CVE-2013-6933

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c…

Vulnerability class: Buffer Overflow

EPSS: 0.174 (96.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2013-6933?
CVE-2013-6933 is a vulnerability in Live555 Streaming_media, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-01-23.
Is CVE-2013-6933 known to be exploited?
3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.