HIGH
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free
Published Aug 29, 2019
7.8
HIGHCVSS 3.0
EPSS 1.46%
Description
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
Affected products
No data.
Configuration 1
- 3.0.7.1
Configuration 2
OR
- 9.0
- 10.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (9)
- http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 x_refsource_CONFIRMPatchThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html vendor-advisoryx_refsource_SUSE
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5913 Advisory
- https://seclists.org/bugtraq/2019/Aug/36 mailing-listx_refsource_BUGTRAQMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/201909-02 vendor-advisoryx_refsource_GENTOO
- https://usn.ubuntu.com/4131-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.debian.org/security/2019/dsa-4504 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- https://www.videolan.org/security/sb-vlc308.html x_refsource_CONFIRMPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 | x_refsource_CONFIRMPatchThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html | vendor-advisoryx_refsource_SUSE | |
| http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html | vendor-advisoryx_refsource_SUSE | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5913 | Advisory | |
| https://seclists.org/bugtraq/2019/Aug/36 | mailing-listx_refsource_BUGTRAQMailing ListThird Party Advisory | |
| https://security.gentoo.org/glsa/201909-02 | vendor-advisoryx_refsource_GENTOO | |
| https://usn.ubuntu.com/4131-1/ | vendor-advisoryx_refsource_UBUNTU | |
| https://www.debian.org/security/2019/dsa-4504 | vendor-advisoryx_refsource_DEBIANThird Party Advisory | |
| https://www.videolan.org/security/sb-vlc308.html | x_refsource_CONFIRMPatchVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 29, 2019
Updated Aug 5, 2024
Reserved Aug 8, 2019
Link CVE-2019-14778
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2019-5913 Assigner mitre
Published Aug 29, 2019
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2019-5913