CVE-2014-1684
Fixed in a distro release EPSS 5%
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.
Products: videolan vlc_media_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | vlc | 2.1.4-1 |
| Debian 13 | vlc | 2.1.4-1 |
| Debian 14 | vlc | 2.1.4-1 |
| Ubuntu 14.04 LTS | vlc | 2.1.4-0ubuntu14.04.1 |