Fluid Attacks Database

Description

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	taglib	>=0 <1.7.2-1	1.7.2-1
debian 12	taglib	>=0 <1.7.2-1	1.7.2-1
debian 14	taglib	>=0 <1.7.2-1	1.7.2-1
debian 13	taglib	>=0 <1.7.2-1	1.7.2-1

Aliases

1. CVE-2012-23962. NVD-2012-23963. OSV-DEBIAN-2012-23964. OSV-2012-23965. SECURITY-TRACKER-CVE-2012-2396

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.