CVE-2013-6283

Published: 25 October 2013

VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.

Notes

Author	Note
mdeslaur	can't reproduce

Priority

Status

Package	Release	Status
vlc Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Not vulnerable
	quantal	Ignored (end of life)
	raring	Ignored (end of life)
	saucy	Ignored (end of life)
	trusty	Not vulnerable
	upstream	Needs triage
	utopic	Not vulnerable

References

http://www.exploit-db.com/exploits/27700
https://www.cve.org/CVERecord?id=CVE-2013-6283
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›