CVE Vulnerabilities

CVE-2019-14535

Divide By Zero

Published: Aug 29, 2019 | Modified: Aug 18, 2020
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Vlc_media_player Videolan 3.0.7.1 3.0.7.1

References