CVE-2010-3907
Gentoo Linux Security Advisory 201411-01
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.
Múltiples desbordamientos de entero en real.c en el complemento Real demuxer en VideoLAN VLC Media Player anterior a v1.1.6 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de un valor cero i_subpackets en un archivo de Real Media, que conduce a un desbordamiento de búfer basado en montón ..
Multiple vulnerabilities have been found in VLC, the worst of which could lead to user-assisted execution of arbitrary code. Versions less than 2.1.2 are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-10-12 CVE Reserved
- 2011-01-03 CVE Published
- 2024-08-07 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-189: Numeric Errors
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=6568965770f906d34d4aef83237842a5376adb55 | X_refsource_confirm | |
| http://www.cs.brown.edu/people/drosenbe/research.html | X_refsource_misc | |
| http://www.securityfocus.com/bid/45632 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/64461 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13950 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.videolan.org/security/sa1007.html | 2023-11-07 |
| URL | Date | SRC |
|---|---|---|
| http://www.vupen.com/english/advisories/2010/3345 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | <= 1.1.5 Search vendor "Videolan" for product "Vlc Media Player" and version " <= 1.1.5" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.1.99b Search vendor "Videolan" for product "Vlc Media Player" and version "0.1.99b" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.1.99e Search vendor "Videolan" for product "Vlc Media Player" and version "0.1.99e" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.1.99f Search vendor "Videolan" for product "Vlc Media Player" and version "0.1.99f" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.1.99g Search vendor "Videolan" for product "Vlc Media Player" and version "0.1.99g" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.1.99h Search vendor "Videolan" for product "Vlc Media Player" and version "0.1.99h" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.1.99i Search vendor "Videolan" for product "Vlc Media Player" and version "0.1.99i" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.0 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.60 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.60" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.61 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.61" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.62 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.62" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.63 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.63" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.70 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.70" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.71 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.71" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.72 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.72" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.73 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.73" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.80 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.80" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.81 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.81" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.82 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.82" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.83 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.83" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.90 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.90" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.91 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.91" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.2.92 Search vendor "Videolan" for product "Vlc Media Player" and version "0.2.92" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.3.0 Search vendor "Videolan" for product "Vlc Media Player" and version "0.3.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.3.1 Search vendor "Videolan" for product "Vlc Media Player" and version "0.3.1" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.4.0 Search vendor "Videolan" for product "Vlc Media Player" and version "0.4.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.4.1 Search vendor "Videolan" for product "Vlc Media Player" and version "0.4.1" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.4.2 Search vendor "Videolan" for product "Vlc Media Player" and version "0.4.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.4.3 Search vendor "Videolan" for product "Vlc Media Player" and version "0.4.3" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.4.4 Search vendor "Videolan" for product "Vlc Media Player" and version "0.4.4" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.4.5 Search vendor "Videolan" for product "Vlc Media Player" and version "0.4.5" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.4.6 Search vendor "Videolan" for product "Vlc Media Player" and version "0.4.6" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.5.0 Search vendor "Videolan" for product "Vlc Media Player" and version "0.5.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.5.1 Search vendor "Videolan" for product "Vlc Media Player" and version "0.5.1" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.5.2 Search vendor "Videolan" for product "Vlc Media Player" and version "0.5.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.5.3 Search vendor "Videolan" for product "Vlc Media Player" and version "0.5.3" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.6.0 Search vendor "Videolan" for product "Vlc Media Player" and version "0.6.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.6.1 Search vendor "Videolan" for product "Vlc Media Player" and version "0.6.1" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.6.2 Search vendor "Videolan" for product "Vlc Media Player" and version "0.6.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.7.0 Search vendor "Videolan" for product "Vlc Media Player" and version "0.7.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.7.2 Search vendor "Videolan" for product "Vlc Media Player" and version "0.7.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.8.0 Search vendor "Videolan" for product "Vlc Media Player" and version "0.8.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.8.1 Search vendor "Videolan" for product "Vlc Media Player" and version "0.8.1" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.8.2 Search vendor "Videolan" for product "Vlc Media Player" and version "0.8.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.8.4 Search vendor "Videolan" for product "Vlc Media Player" and version "0.8.4" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.8.5 Search vendor "Videolan" for product "Vlc Media Player" and version "0.8.5" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.8.6 Search vendor "Videolan" for product "Vlc Media Player" and version "0.8.6" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.2 Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.3 Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.3" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.4 Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.4" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.5 Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.5" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.6 Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.6" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.8a Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.8a" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.9 Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.9" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 0.9.10 Search vendor "Videolan" for product "Vlc Media Player" and version "0.9.10" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.0.0 Search vendor "Videolan" for product "Vlc Media Player" and version "1.0.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.0.1 Search vendor "Videolan" for product "Vlc Media Player" and version "1.0.1" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.0.2 Search vendor "Videolan" for product "Vlc Media Player" and version "1.0.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.0.3 Search vendor "Videolan" for product "Vlc Media Player" and version "1.0.3" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.0.4 Search vendor "Videolan" for product "Vlc Media Player" and version "1.0.4" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.0.5 Search vendor "Videolan" for product "Vlc Media Player" and version "1.0.5" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.0.6 Search vendor "Videolan" for product "Vlc Media Player" and version "1.0.6" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.1.0 Search vendor "Videolan" for product "Vlc Media Player" and version "1.1.0" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.1.1 Search vendor "Videolan" for product "Vlc Media Player" and version "1.1.1" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.1.2 Search vendor "Videolan" for product "Vlc Media Player" and version "1.1.2" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.1.3 Search vendor "Videolan" for product "Vlc Media Player" and version "1.1.3" | - |
Affected
| ||||||
| Videolan Search vendor "Videolan" | Vlc Media Player Search vendor "Videolan" for product "Vlc Media Player" | 1.1.4 Search vendor "Videolan" for product "Vlc Media Player" and version "1.1.4" | - |
Affected
| ||||||