NVD

Id
19682  
Name
CVE-2016-3941  
Description
Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, related to "seek across EOF."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-04-18  
Modified Date
2016-11-29  
Seq
2016-3941  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107828 19682 CVE-2016-3941 openSUSE-SU-2016:1651  View
107829 19682 CVE-2016-3941 1035456  View
107830 19682 CVE-2016-3941 https://bugs.launchpad.net/ubuntu/+source/vlc/+bug/1533633  View
107831 19682 CVE-2016-3941 [vlc-commits] 20150131 stream: handle seek across EOF correctly (hopefully)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1403 JVNDB-2016-002176 VideoLAN VLC media player の input/stream.c の AStreamPeekStream 関数におけるバッファオーバーフローの脆弱性 VideoLAN VLC media player の input/stream.c の AStreamPeekStream 関数には、"seek across EOF" に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2016-3941 90447 CVE-2016-3941 19682 4.3 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002176.html 2016-04-12 2016-04-25 View