Lucene search

[email protected]NVD:CVE-2010-3907

HistoryJan 03, 2011 - 8:00 p.m.

CVE-2010-3907

2011-01-0320:00:42

CWE-189

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.

Affected configurations

NVD

Node

videolanvlc_media_playerRange≤1.1.5

videolanvlc_media_playerMatch0.1.99b

videolanvlc_media_playerMatch0.1.99e

videolanvlc_media_playerMatch0.1.99f

videolanvlc_media_playerMatch0.1.99g

videolanvlc_media_playerMatch0.1.99h

videolanvlc_media_playerMatch0.1.99i

videolanvlc_media_playerMatch0.2.0

videolanvlc_media_playerMatch0.2.60

videolanvlc_media_playerMatch0.2.61

videolanvlc_media_playerMatch0.2.62

videolanvlc_media_playerMatch0.2.63

videolanvlc_media_playerMatch0.2.70

videolanvlc_media_playerMatch0.2.71

videolanvlc_media_playerMatch0.2.72

videolanvlc_media_playerMatch0.2.73

videolanvlc_media_playerMatch0.2.80

videolanvlc_media_playerMatch0.2.81

videolanvlc_media_playerMatch0.2.82

videolanvlc_media_playerMatch0.2.83

videolanvlc_media_playerMatch0.2.90

videolanvlc_media_playerMatch0.2.91

videolanvlc_media_playerMatch0.2.92

videolanvlc_media_playerMatch0.3.0

videolanvlc_media_playerMatch0.3.1

videolanvlc_media_playerMatch0.4.0

videolanvlc_media_playerMatch0.4.1

videolanvlc_media_playerMatch0.4.2

videolanvlc_media_playerMatch0.4.3

videolanvlc_media_playerMatch0.4.4

videolanvlc_media_playerMatch0.4.5

videolanvlc_media_playerMatch0.4.6

videolanvlc_media_playerMatch0.5.0

videolanvlc_media_playerMatch0.5.1

videolanvlc_media_playerMatch0.5.2

videolanvlc_media_playerMatch0.5.3

videolanvlc_media_playerMatch0.6.0

videolanvlc_media_playerMatch0.6.1

videolanvlc_media_playerMatch0.6.2

videolanvlc_media_playerMatch0.7.0

videolanvlc_media_playerMatch0.7.2

videolanvlc_media_playerMatch0.8.0

videolanvlc_media_playerMatch0.8.1

videolanvlc_media_playerMatch0.8.2

videolanvlc_media_playerMatch0.8.4

videolanvlc_media_playerMatch0.8.5

videolanvlc_media_playerMatch0.8.6

videolanvlc_media_playerMatch0.9.2

videolanvlc_media_playerMatch0.9.3

videolanvlc_media_playerMatch0.9.4

videolanvlc_media_playerMatch0.9.5

videolanvlc_media_playerMatch0.9.6

videolanvlc_media_playerMatch0.9.8a

videolanvlc_media_playerMatch0.9.9

videolanvlc_media_playerMatch0.9.10

videolanvlc_media_playerMatch1.0.0

videolanvlc_media_playerMatch1.0.1

videolanvlc_media_playerMatch1.0.2

videolanvlc_media_playerMatch1.0.3

videolanvlc_media_playerMatch1.0.4

videolanvlc_media_playerMatch1.0.5

videolanvlc_media_playerMatch1.0.6

videolanvlc_media_playerMatch1.1.0

videolanvlc_media_playerMatch1.1.1

videolanvlc_media_playerMatch1.1.2

videolanvlc_media_playerMatch1.1.3

videolanvlc_media_playerMatch1.1.4

References

git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=6568965770f906d34d4aef83237842a5376adb55

www.cs.brown.edu/people/drosenbe/research.html

www.securityfocus.com/bid/45632

www.videolan.org/security/sa1007.html

www.vupen.com/english/advisories/2010/3345

exchange.xforce.ibmcloud.com/vulnerabilities/64461

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13950

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON

Related for NVD:CVE-2010-3907

cve1 debiancve1 openvas3 cvelist1 ubuntucve1 prion1 nessus4 gentoo1