CVE:CVE-2019-13602
CNNVD:CNNVD-201907-736
VideoLAN VLC media player是法国VideoLAN组织的一款免费、开源的跨平台多媒体播放器（也是一个多媒体框架）。该产品支持播放多种介质（文件、光盘等）、多种音视频格式（WMV,MP3等）等。
VideoLAN VLC media player 3.0.7.1之前版本中的modules/demux/mp4/mp4.c文件的’MP4_EIA608_Convert()‘函数存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade videolan vlc_media_player to a higher version than 3.0.7.1,and avoid the version (,3.0.7.1]; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.04,and avoid the version 18.04,19.04; Upgrade opensuse backports_sle to a higher version than 15.0,15.0:sp1,and avoid the version 15.0,15.0:sp1; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1