VIR Vulnerability Intelligence Relay

CVE-2013-6283

high
Published 2013-10-25 · Modified 2026-04-29
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5

Description

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2013-6283

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed2.1.0-2
debian debianbullseyefixed2.1.0-2
debian debianforkyfixed2.1.0-2
debian debiansidfixed2.1.0-2
debian debiantrixiefixed2.1.0-2

Application impact
VendorProductVersionsFixed
videolanvlc_media_player{"endIncluding":"2.0.8"}
videolanvlc_media_player1.0.0
videolanvlc_media_player1.0.1
videolanvlc_media_player1.0.2
videolanvlc_media_player1.0.3
videolanvlc_media_player1.0.4
videolanvlc_media_player1.0.5
videolanvlc_media_player1.0.6
videolanvlc_media_player1.1.0
videolanvlc_media_player1.1.1
videolanvlc_media_player1.1.2
videolanvlc_media_player1.1.3
videolanvlc_media_player1.1.4
videolanvlc_media_player1.1.4.1
videolanvlc_media_player1.1.5
videolanvlc_media_player1.1.6
videolanvlc_media_player1.1.6.1
videolanvlc_media_player1.1.7
videolanvlc_media_player1.1.8
videolanvlc_media_player1.1.9
videolanvlc_media_player1.1.10
videolanvlc_media_player1.1.10.1
videolanvlc_media_player1.1.11
videolanvlc_media_player1.1.12
videolanvlc_media_player1.1.13
videolanvlc_media_player2.0.0
videolanvlc_media_player2.0.1
videolanvlc_media_player2.0.2
videolanvlc_media_player2.0.3
videolanvlc_media_player2.0.4
videolanvlc_media_player2.0.5
videolanvlc_media_player2.0.6
videolanvlc_media_player2.0.7

References

CWEs

CWE-20

Verify integrity in audit chain (admin only). AS-IS.