Vulnerability in Videolan Vlc_media_player
CVE-2010-2062
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitra…
EPSS: 0.030 (86.8th percentile) — read the EPSS interpretation.
Affected products
- Videolan Vlc_media_player — versions 0.5.0, 0.5.1, 0.5.2
- N/a — versions n/a
Weakness classification (CWE)
References
- 20090727 [DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing integer underflow. (mailing-list, Exploit, x_refsource_FULLDISC)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (x_refsource_CONFIRM)
- [oss-security] 20100604 Re: CVE requests for mplayer/vlc and abcm2ps (mailing-list, x_refsource_MLIST)