« Volver al listado

CVE-2014-3452

Estado: ModificadaMedia (4.3)—

Filters\LAV\avfilter-lav-4.dll en K-lite Codec 10.4.5 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) a través de un archivo .jpg manipulado.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Codecguide — K-lite Codec Pack

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3452",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-16T15:55:05.380",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/126613/klite1045-corrupt.txt",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/67403",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/126613/klite1045-corrupt.txt",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/67403",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Filters\\LAV\\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file."
    },
    {
      "lang": "es",
      "value": "Filters\\LAV\\avfilter-lav-4.dll en K-lite Codec 10.4.5 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) a través de un archivo .jpg manipulado."
    }
  ],
  "lastModified": "2026-06-17T00:08:12.607",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codecguide:k-lite_codec_pack:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9F51C5D-49D5-42A2-BA59-ED1F1AAF233F",
              "versionEndIncluding": "10.4.5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}