CVE-2010-2062

2014-12-2620:59:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2010-2062

vulnerability

real_get_rdt_chunk

vlc media player

mplayer

remote code execution

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.095 Low

EPSS

Percentile

94.7%

JSON

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

CPENameOperatorVersion
videolan:vlc_media_playervideolan vlc media playereq0.8.6b
videolan:vlc_media_playervideolan vlc media playereq0.7.2
videolan:vlc_media_playervideolan vlc media playereq0.8.6g
videolan:vlc_media_playervideolan vlc media playereq0.8.1337
videolan:vlc_media_playervideolan vlc media playereq0.5.0
videolan:vlc_media_playervideolan vlc media playereq0.8.4a
videolan:vlc_media_playervideolan vlc media playereq0.8.0
videolan:vlc_media_playervideolan vlc media playereq0.9.0
videolan:vlc_media_playervideolan vlc media playereq0.9.4
videolan:vlc_media_playervideolan vlc media playereq0.8.5

CPE	Name	Operator	Version
videolan:vlc_media_player	videolan vlc media player	eq	0.8.6b
videolan:vlc_media_player	videolan vlc media player	eq	0.7.2
videolan:vlc_media_player	videolan vlc media player	eq	0.8.6g
videolan:vlc_media_player	videolan vlc media player	eq	0.8.1337
videolan:vlc_media_player	videolan vlc media player	eq	0.5.0
videolan:vlc_media_player	videolan vlc media player	eq	0.8.4a
videolan:vlc_media_player	videolan vlc media player	eq	0.8.0
videolan:vlc_media_player	videolan vlc media player	eq	0.9.0
videolan:vlc_media_player	videolan vlc media player	eq	0.9.4
videolan:vlc_media_player	videolan vlc media player	eq	0.8.5