CVE-2013-3245
Description
plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer overflow, or an uncaught exception. NOTE: the vendor disputes the severity and claimed vulnerability type of this issue, stating "This PoC crashes VLC, indeed, but does nothing more... this is not an integer overflow error, but an uncaught exception and I doubt that it is exploitable. This uncaught exception makes VLC abort, not execute random code, on my Linux 64bits machine." A PoC posted by the original researcher shows signs of an attacker-controlled out-of-bounds read, but the affected instruction does not involve a register that directly influences control flow
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | fixed | 2.0.7-1 |
| debian | bullseye | fixed | 2.0.7-1 |
| debian | forky | fixed | 2.0.7-1 |
| debian | sid | fixed | 2.0.7-1 |
| debian | trixie | fixed | 2.0.7-1 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| videolan | vlc_media_player | 2.0.7 | |
References
- http://seclists.org/fulldisclosure/2013/Jul/71
- http://seclists.org/fulldisclosure/2013/Jul/77
- http://seclists.org/fulldisclosure/2013/Jul/79
- http://secunia.com/advisories/52956
- http://secunia.com/blog/372/
- http://www.jbkempf.com/blog/post/2013/More-lies-from-Secunia
- http://www.securityfocus.com/bid/61032
- https://security-tracker.debian.org/tracker/CVE-2013-3245
CWEs
CWE-119 CWE-122 CWE-125
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.