CVE-2014-1684

CVE-2014-1684 describes a denial-of-service vulnerability in VideoLAN VLC Media Player versions prior to 2.1.3. This flaw, located in the ASF Demuxer's ASF_ReadObject_file_properties function, allows remote attackers to crash the application via a specially crafted ASF file containing a zero minimum and maximum data packet size, leading to a divide-by-zero error. The vulnerability has a CVSS score of 4.3, indicating a medium severity. It can be exploited remotely with medium attack complexity, requiring user interaction (e.g., opening a malicious file), and results in a denial of service (application crash) without impacting confidentiality or integrity. While not actively exploited in the wild and not listed in CISA's KEV catalog, a proof-of-concept exploit (EDB-31429) is publicly available on ExploitDB. There is minimal community discussion or media coverage surrounding this CVE.