CVE-2010-2062

Publication date 26 December 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mplayer 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid Ignored
8.04 LTS hardy Ignored end of life
vlc 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Not affected
8.04 LTS hardy Ignored end of life
xine-lib 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Not affected
8.04 LTS hardy Ignored end of life

Notes

jdstrand

per Debian, xine-lib: <not-affected> (immune due to additional check in xio_rw_abbort)

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
vlc