Vulnerability in Videolan Vlc Media Player

CVE-2010-2062

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

Affected products

Videolan Vlc_media_player — versions 0.5.0, 0.5.1, 0.5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

secalert@redhat.com (mailing-list, Exploit, x_refsource_FULLDISC)
secalert@redhat.com (Exploit, x_refsource_MISC)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_MLIST)