CVE-2010-2062 — Integer Underflow (Wrap or Wraparound) in VLC Media Player

CWE-1895 documents5 sources
Severity
7.5HIGHNVD
EPSS
3.0%
top 13.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MplayerVideolan VLC Media Player
Timeline
PublishedDec 26
Latest updateMay 17

Description

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶Debianvideolan/vlc_media_player< 1.0.1-1+3
▶Debianmplayer/mplayer< 2:1.0~rc3+svn20100502-3+3

🔴Vulnerability Details

3
GHSA
GHSA-pp8c-mm4f-pg89: Integer underflow in the real_get_rdt_chunk function in real↗2022-05-17
▶
CVEList
CVE-2010-2062: Integer underflow in the real_get_rdt_chunk function in real↗2014-12-26
▶
OSV
CVE-2010-2062: Integer underflow in the real_get_rdt_chunk function in real↗2014-12-26
▶

📋Vendor Advisories

1
Debian
CVE-2010-2062: mplayer - Integer underflow in the real_get_rdt_chunk function in real.c, as used in modul...↗2010
▶
CVE-2010-2062 — Integer Underflow (Wrap or Wraparound) | cvebase