cbcvebase.
CVE-2010-3907
published 2011-01-03

CVE-2010-3907: Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service…

PriorityP339critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.77%
92.2th percentile
Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.

Affected

72 ranges· showing 25
VendorProductVersion rangeFixed in
debianvlc< vlc 1.1.3-1squeeze1 (bookworm)vlc 1.1.3-1squeeze1 (bookworm)
videolanvlc_media_player<= 1.1.5—
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——
videolanvlc_media_player——

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL
vendor_debian9.3CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.