CVE-2014-9627

The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size.
Configurations

Configuration 1 (hide)

cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-01-24 22:15

Updated : 2024-02-04 20:39


NVD link : CVE-2014-9627

Mitre link : CVE-2014-9627

CVE.ORG link : CVE-2014-9627


JSON object : View

Products Affected

videolan

  • vlc_media_player
CWE
CWE-704

Incorrect Type Conversion or Cast