CVE-2013-6934

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.

• CWE-189

• http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.htmlExploit, Third Party Advisory
• http://www.live555.com/liveMedia/public/changelog.txtVendor Advisory
• http://www.securityfocus.com/bid/65139Third Party Advisory, VDB Entry
• http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.htmlExploit, Third Party Advisory
• http://www.live555.com/liveMedia/public/changelog.txtVendor Advisory
• http://www.securityfocus.com/bid/65139Third Party Advisory, VDB Entry

Published

Jan 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6927Internet TRiLOGI Server (unknown versions) could allow a loc…5.5
• CVE-2013-6929SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and ear…
• CVE-2013-6930SQL injection vulnerability in the page-navigation implement…
• CVE-2013-6931SQL injection vulnerability in the API in Cybozu Garoon 3.7.…
• CVE-2013-6932Buffer overflow in IrfanView before 4.37, when a multibyte-c…
• CVE-2013-6933The parseRTSPRequestString function in Live Networks Live555…
• CVE-2013-6935Buffer overflow in VideoCharge Software Watermark Master 2.2…
• CVE-2013-6936Multiple SQL injection vulnerabilities in ajaxfs.php in the …
• CVE-2013-6937Buffer overflow in VideoCharge Software Watermark Master 2.2…
• CVE-2013-6938Unspecified vulnerability in the Service VM in Citrix NetSca…
• CVE-2013-6939Unspecified vulnerability in Citrix NetScaler Application De…
• CVE-2013-6940Citrix NetScaler Application Delivery Controller (ADC) 9.3.x…