CVE-2010-3907

2011-01-0320:00:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2010-3907

real demuxer plugin

videolan vlc media player

integer overflows

denial of service

application crash

arbitrary code execution

heap-based buffer overflow

8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.051 Low

EPSS

Percentile

92.9%

JSON

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.

CPENameOperatorVersion
videolan:vlc_media_playervideolan vlc media playereq1.1.3
videolan:vlc_media_playervideolan vlc media playereq0.7.2
videolan:vlc_media_playervideolan vlc media playereq0.5.0
videolan:vlc_media_playervideolan vlc media playereq0.2.62
videolan:vlc_media_playervideolan vlc media playereq0.4.0
videolan:vlc_media_playervideolan vlc media playereq0.1.99e
videolan:vlc_media_playervideolan vlc media playereq1.0.3
videolan:vlc_media_playervideolan vlc media playereq0.8.0
videolan:vlc_media_playervideolan vlc media playereq0.1.99g
videolan:vlc_media_playervideolan vlc media playereq0.2.70

CPE	Name	Operator	Version
videolan:vlc_media_player	videolan vlc media player	eq	1.1.3
videolan:vlc_media_player	videolan vlc media player	eq	0.7.2
videolan:vlc_media_player	videolan vlc media player	eq	0.5.0
videolan:vlc_media_player	videolan vlc media player	eq	0.2.62
videolan:vlc_media_player	videolan vlc media player	eq	0.4.0
videolan:vlc_media_player	videolan vlc media player	eq	0.1.99e
videolan:vlc_media_player	videolan vlc media player	eq	1.0.3
videolan:vlc_media_player	videolan vlc media player	eq	0.8.0
videolan:vlc_media_player	videolan vlc media player	eq	0.1.99g
videolan:vlc_media_player	videolan vlc media player	eq	0.2.70