NVD

Id
36243  
Name
CVE-2014-9597  
Description
The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (DEP violation and application crash) via a crafted FLV file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-21  
Modified Date
2015-01-22  
Seq
2014-9597  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185166 36243 CVE-2014-9597 20150116 VLC Media Player 2.1.5 Memory Corruption Vulnerabilities (CVE-2014-9597, CVE-2014-9597)  View
185167 36243 CVE-2014-9597 http://www.binarysniper.net/2015/01/vlc-media-player-215-memory-corruption.html  View
185168 36243 CVE-2014-9597 https://trac.videolan.org/vlc/attachment/ticket/13389/windbglog.txt  View
185169 36243 CVE-2014-9597 https://trac.videolan.org/vlc/ticket/13389  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18871 JVNDB-2014-007746 VideoLAN VLC Media Player の misc/picture_pool.c の picture_pool_Delete 関数における任意のコードを実行される脆弱性 VideoLAN VLC Media Player の misc/picture_pool.c の picture_pool_Delete 関数には、任意のコードを実行される、またはサービス運用妨害 (DEP 違反およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-9597 76890 CVE-2014-9597 36243 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007746.html 2014-12-26 2015-01-23 View