| Package | Affected versions | Patched versions |
|---|---|---|
| vlc media player | = 0.5.0= 0.5.1= 0.5.2= 0.5.3= 0.6.0= 0.6.1= 0.6.2= 0.7.0= 0.7.1= 0.7.2= 0.8.0= 0.8.1= 0.8.1337= 0.8.2= 0.8.4= 0.8.4a= 0.8.5= 0.8.6= 0.8.6a= 0.8.6b= 0.8.6c= 0.8.6d= 0.8.6e= 0.8.6f= 0.8.6g= 0.8.6h= 0.8.6i= 0.9.0= 0.9.1= 0.9.10= 0.9.2= 0.9.3= 0.9.4= 0.9.5= 0.9.6= 0.9.8a= 0.9.9= 0.9.9a≤ 1.0.0 |
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free