Kaspersky ID:
Detect Date:


Lack of content restrictions was found in VLC Media Player. By exploiting this vulnerability malicious users can inject arbitrary code. This vulnerability can be exploited remotely via a specially designed URL.

Technical details

There is lack of URL neutralization in error page generator at VLC web interface. Malicious can exploit this vulnerability by adding script block to URL. PoC and some solution workaround you can find at quantumleap advisory listed at original advisories section.

Original advisories

Related products

CVE list

  • CVE-2014-9743

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.