Unrated

A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered...

CVE-2019-14535 First seen on SecPulse Aug 30, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-14535 vlc Fixed in: 3.0.8-1

Original description The description as published by the source.

A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory seclists.org
advisory security.gentoo.org
advisory debian.org
patch git.videolan.org
patch videolan.org
web lists.opensuse.org
web lists.opensuse.org
web usn.ubuntu.com

Key facts

Severity: Unrated
Published: Aug 30, 2019
First seen on SecPulse: Aug 30, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52