DEBIAN-CVE-2013-6933

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2013-6933
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2013-6933
Upstream
Downstream
Published
2014-01-23T21:55:04Z
Modified
2026-10-05T04:00:03Z
Summary
[none]
Details

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.

References

Affected packages

Debian:12
mplayer

Package

Name
mplayer
Purl
pkg:deb/debian/mplayer?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:1.1.1+svn37434-1

Ecosystem specific 

{
    "urgency":  "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json"
vlc

Package

Name
vlc
Purl
pkg:deb/debian/vlc?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.1.4-1

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json"
Debian:13
mplayer

Package

Name
mplayer
Purl
pkg:deb/debian/mplayer?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:1.1.1+svn37434-1

Ecosystem specific 

{
    "urgency":  "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json"
vlc

Package

Name
vlc
Purl
pkg:deb/debian/vlc?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.1.4-1

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json"
Debian:14
liblivemedia

Package

Name
liblivemedia
Purl
pkg:deb/debian/liblivemedia?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2014.01.13-1

Affected versions

2004.*
2004.11.11a-1
2005.*
2005.04.01-1
2005.06.16-1
2005.07.21-1
2005.10.05-1
2006.*
2006.03.17-1
2006.03.17-2
2007.*
2007.02.20-1
2007.02.20-2
2008.*
2008.07.25-1
2008.07.25-2
2009.*
2009.11.27-1
2010.*
2010.02.10-1
2010.04.09-1
2010.11.17-1
2011.*
2011.03.14-1
2011.05.25-1
2011.06.16-1
2011.07.08-1
2011.07.21-1
2011.08.22-1
2011.09.02-1
2011.12.23-1
2012.*
2012.02.04-1
2012.02.29-1
2012.02.29-2
2012.04.04-1
2012.04.21-1
2012.05.03-1~bpo60+1
2012.05.03-1
2012.05.17-1~bpo60+1
2012.05.17-1
2012.05.17-1+wheezy1
2012.08.31-1
2012.10.24-1
2012.11.16-1
2012.11.30-1
2013.*
2013.01.05-1
2013.01.05-2
2013.01.05-3
2013.01.15-1
2013.04.30-1
2013.10.25-1

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json"
mplayer

Package

Name
mplayer
Purl
pkg:deb/debian/mplayer?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:1.1.1+svn37434-1

Ecosystem specific 

{
    "urgency":  "low"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json"
vlc

Package

Name
vlc
Purl
pkg:deb/debian/vlc?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.1.4-1

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2013-6933.json"