Buffer overflow in Videolan Vlc Media Player

CVE-2014-3441

codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file.

Vulnerability class: Buffer Overflow

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

Affected products

Videolan Vlc_media_player — versions 2.1.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)