CVE-2017-8313
CVE-2017-8313
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
23 May 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file.
Affected products
VideoLAN · VLCWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →