© 2026 vulntracker.io

CVE-2013-6933

N/A

Published: January 23, 2014 at 09:00 PM UTC

Updated: June 17, 2026 at 12:01 AM UTC

1 product affected across 1 vendorStreaming Media

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 17%

Description

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Streaming Media · LIVE555

95%

2011-10-18 2011-10-27 2011-10-5 2011-10-9 2011-11-2 2011-11-20 2011-11-27 2011-11-28 2011-11-29 2011-11-8 2011-12-19 2011-12-2 2011-12-20 2011-12-23 2011-8-13 2011-8-20 2011-8-22 2011-9-19 2011-9-2 2012-1-13 2012-1-25 2012-1-26 2012-1-7 2012-10-1 2012-10-11 2012-10-12 2012-10-16 2012-10-17 2012-10-18 2012-10-21 2012-10-22 2012-10-24 2012-10-4 2012-11-16 2012-11-17 2012-11-22 2012-11-28 2012-11-29 2012-11-30 2012-11-5 2012-11-8 2012-12-15 2012-12-18 2012-12-21 2012-12-22 2012-12-23 2012-12-24 2012-2-29 2012-2-3 2012-2-4 2012-3-20 2012-3-22 2012-4-18 2012-4-21 2012-4-26 2012-4-27 2012-4-4 2012-5-11 2012-5-17 2012-5-3 2012-6-12 2012-6-17 2012-6-23 2012-6-26 2012-7-14 2012-7-18 2012-7-24 2012-7-26 2012-7-3 2012-7-6 2012-8-12 2012-8-17 2012-8-20 2012-8-28 2012-8-29 2012-8-30 2012-8-31 2012-8-8 2012-9-11 2012-9-12 2012-9-13 2012-9-27 2012-9-6 2012-9-7 2013-1-15 2013-1-18 2013-1-19 2013-1-21 2013-1-22 2013-1-23 2013-1-25 2013-1-3 2013-1-4 2013-1-5 2013-10-1 2013-10-11 2013-10-16 2013-10-18 2013-10-2 2013-10-22 2013-10-24 2013-10-25 2013-10-3 2013-10-7 2013-10-8 2013-10-9 2013-11-10 2013-11-14 2013-11-15 2013-11-25 2013-11-6 2013-2-11 2013-2-27 2013-2-5 2013-3-23 2013-3-31 2013-3-7 2013-4-1 2013-4-16 2013-4-21 2013-4-22 2013-4-23 2013-4-29 2013-4-30 2013-4-4 2013-4-5 2013-4-6 2013-4-8 2013-5-30 2013-6-14 2013-6-18 2013-6-30 2013-6-6 2013-7-16 2013-7-3 2013-7-30 2013-7-31 2013-8-15 2013-8-16 2013-8-28 2013-8-31 2013-8-5 2013-9-11 2013-9-18 2013-9-27 2013-9-30 2013-9-7 2013-9-8

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_MISC

Source: [email protected]

http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html

x_refsource_CONFIRM

Source: [email protected]

http://www.live555.com/liveMedia/public/changelog.txt

CVSS

7.5HIGH[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-119CWE-189

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card