p PatchFirst

CVE-2010-2062

CVE-2010-2062

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

EPSS 4.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • mplayer Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:1.0~rc3+svn20100502-3

    Update to 2:1.0~rc3+svn20100502-3

  • mplayer Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:1.0~rc3+svn20100502-3

    Update to 2:1.0~rc3+svn20100502-3

  • mplayer Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:1.0~rc3+svn20100502-3

    Update to 2:1.0~rc3+svn20100502-3

  • vlc Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0.1-1

    Update to 1.0.1-1

  • vlc Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.1-1

    Update to 1.0.1-1

  • vlc Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0.1-1

    Update to 1.0.1-1

Original sources

Check your server →