Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less than 7.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vlc_media_player | Videolan | * | 2.1.6 (excluding) |
| Vlc | Ubuntu | lucid | * |
| Vlc | Ubuntu | precise | * |
| Vlc | Ubuntu | trusty | * |
| Vlc | Ubuntu | upstream | * |
| Vlc | Ubuntu | utopic | * |