CVE-2010-3907 Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute ar...
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | <= 1.1.5 | No fix listed |
| videolan vlc media player | = 0.1.99b | No fix listed |
| videolan vlc media player | = 0.1.99e | No fix listed |
| videolan vlc media player | = 0.1.99f | No fix listed |
| videolan vlc media player | = 0.1.99g | No fix listed |
| videolan vlc media player | = 0.1.99h | No fix listed |
| videolan vlc media player | = 0.1.99i | No fix listed |
| videolan vlc media player | = 0.2.0 | No fix listed |
| videolan vlc media player | = 0.2.60 | No fix listed |
| videolan vlc media player | = 0.2.61 | No fix listed |
| videolan vlc media player | = 0.2.62 | No fix listed |
| videolan vlc media player | = 0.2.63 | No fix listed |
| videolan vlc media player | = 0.2.70 | No fix listed |
| videolan vlc media player | = 0.2.71 | No fix listed |
| videolan vlc media player | = 0.2.72 | No fix listed |
| videolan vlc media player | = 0.2.73 | No fix listed |
| videolan vlc media player | = 0.2.80 | No fix listed |
| videolan vlc media player | = 0.2.81 | No fix listed |
| videolan vlc media player | = 0.2.82 | No fix listed |
| videolan vlc media player | = 0.2.83 | No fix listed |
| videolan vlc media player | = 0.2.90 | No fix listed |
| videolan vlc media player | = 0.2.91 | No fix listed |
| videolan vlc media player | = 0.2.92 | No fix listed |
| videolan vlc media player | = 0.3.0 | No fix listed |
| videolan vlc media player | = 0.3.1 | No fix listed |
Show 45 more
| Product | Affected versions | Fixed in |
|---|---|---|
| videolan vlc media player | = 0.4.0 | No fix listed |
| videolan vlc media player | = 0.4.1 | No fix listed |
| videolan vlc media player | = 0.4.2 | No fix listed |
| videolan vlc media player | = 0.4.3 | No fix listed |
| videolan vlc media player | = 0.4.4 | No fix listed |
| videolan vlc media player | = 0.4.5 | No fix listed |
| videolan vlc media player | = 0.4.6 | No fix listed |
| videolan vlc media player | = 0.5.0 | No fix listed |
| videolan vlc media player | = 0.5.1 | No fix listed |
| videolan vlc media player | = 0.5.2 | No fix listed |
| videolan vlc media player | = 0.5.3 | No fix listed |
| videolan vlc media player | = 0.6.0 | No fix listed |
| videolan vlc media player | = 0.6.1 | No fix listed |
| videolan vlc media player | = 0.6.2 | No fix listed |
| videolan vlc media player | = 0.7.0 | No fix listed |
| videolan vlc media player | = 0.7.2 | No fix listed |
| videolan vlc media player | = 0.8.0 | No fix listed |
| videolan vlc media player | = 0.8.1 | No fix listed |
| videolan vlc media player | = 0.8.2 | No fix listed |
| videolan vlc media player | = 0.8.4 | No fix listed |
| videolan vlc media player | = 0.8.5 | No fix listed |
| videolan vlc media player | = 0.8.6 | No fix listed |
| videolan vlc media player | = 0.9.2 | No fix listed |
| videolan vlc media player | = 0.9.3 | No fix listed |
| videolan vlc media player | = 0.9.4 | No fix listed |
| videolan vlc media player | = 0.9.5 | No fix listed |
| videolan vlc media player | = 0.9.6 | No fix listed |
| videolan vlc media player | = 0.9.8a | No fix listed |
| videolan vlc media player | = 0.9.9 | No fix listed |
| videolan vlc media player | = 0.9.10 | No fix listed |
| videolan vlc media player | = 1.0.0 | No fix listed |
| videolan vlc media player | = 1.0.1 | No fix listed |
| videolan vlc media player | = 1.0.2 | No fix listed |
| videolan vlc media player | = 1.0.3 | No fix listed |
| videolan vlc media player | = 1.0.4 | No fix listed |
| videolan vlc media player | = 1.0.5 | No fix listed |
| videolan vlc media player | = 1.0.6 | No fix listed |
| videolan vlc media player | = 1.1.0 | No fix listed |
| videolan vlc media player | = 1.1.1 | No fix listed |
| videolan vlc media player | = 1.1.2 | No fix listed |
| videolan vlc media player | = 1.1.3 | No fix listed |
| videolan vlc media player | = 1.1.4 | No fix listed |
| debian/vlc(Debian:12) | < 1.1.3-1squeeze1 | 1.1.3-1squeeze1 |
| debian/vlc(Debian:13) | < 1.1.3-1squeeze1 | 1.1.3-1squeeze1 |
| debian/vlc(Debian:14) | < 1.1.3-1squeeze1 | 1.1.3-1squeeze1 |
References
- git.videolan.org
- www.cs.brown.edu
- 45632 vdb-entry
- www.videolan.org patch vendor-advisory
- ADV-2010-3345 vdb-entry vendor-advisory
- vlcmediaplayer-realdemuxer-code-exec(64461) vdb-entry
- oval:org.mitre.oval:def:13950 signature vdb-entry
- Debian Security Tracker CVE-2010-3907 vendor-advisory