The ASFReadObjectfile_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "libvlc-dev" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "libvlc5" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "libvlccore-dev" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "libvlccore7" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-data" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-dbg" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-nox" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-plugin-fluidsynth" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-plugin-jack" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-plugin-notify" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-plugin-pulse" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-plugin-sdl" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-plugin-svg" }, { "binary_version": "2.1.4-0ubuntu14.04.1", "binary_name": "vlc-plugin-zvbi" } ] }