p PatchFirst

CVE-2010-3907

CVE-2010-3907

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.

EPSS 5.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • vlc Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.3-1squeeze1

    Update to 1.1.3-1squeeze1

  • vlc Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.3-1squeeze1

    Update to 1.1.3-1squeeze1

  • vlc Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.3-1squeeze1

    Update to 1.1.3-1squeeze1

Original sources

Check your server →