CVE-2013-1954
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows...
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.
Exploit likelihood
What each source reports
NVD Score used
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.
- Record
CVE-2013-1954- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.
- Record
CVE-2013-1954- Updated
- 2026-11-02
EUVDEUVD-2013-1944 No score
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.
- Record
EUVD-2013-1944- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m87f-p3jh-r7rv No score
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows...
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.
- Record
GHSA-m87f-p3jh-r7rv- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.
- Record
CVE-2013-1954- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1954 No score
The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.
- Record
DEBIAN-CVE-2013-1954- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1954 is a medium vulnerability (CVSS 6.8) in Videolan Vlc Media Player, published July 10, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.07%, the 93rd percentile. Fixed in vlc 2.0.6-1.
References
marc.info?l=oss-security&m=136593191416152&w=2
secunia.com/advisories/59793
trac.videolan.org/vlc/ticket/8024
securityfocus.com/bid/57333
git.videolan.org?p=vlc.git%3Ba=commitdiff%3Bh=b31ce523331aa3a6e620b68cdfe3f161d519631e
Show 7 moreShow less
osvdb.org/89598
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17023
videolan.org/security/sa1302.html
nvd.nist.gov/vuln/detail/CVE-2013-1954
github.com/advisories/GHSA-m87f-p3jh-r7rv
security-tracker.debian.org/tracker/CVE-2013-1954