CVE-2010-2062
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp...
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
Exploit likelihood
What each source reports
NVD Score used
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
- Record
CVE-2010-2062- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
- Record
CVE-2010-2062- Updated
- 2026-11-02
EUVDEUVD-2010-2081 No score
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
- Record
EUVD-2010-2081- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pp8c-mm4f-pg89 No score
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp...
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
- Record
GHSA-pp8c-mm4f-pg89- Updated
- 2026-11-02
OSV No score
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
- Record
CVE-2010-2062- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2062 No score
Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.
- Record
DEBIAN-CVE-2010-2062- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mplayerDebian:12 |
before 2:1.0~rc3+svn20100502-3 | 2:1.0~rc3+svn20100502-3 |
mplayerDebian:13 |
before 2:1.0~rc3+svn20100502-3 | 2:1.0~rc3+svn20100502-3 |
mplayerDebian:14 |
before 2:1.0~rc3+svn20100502-3 | 2:1.0~rc3+svn20100502-3 |
vlcDebian:12 |
before 1.0.1-1 | 1.0.1-1 |
vlcDebian:13 |
before 1.0.1-1 | 1.0.1-1 |
vlcDebian:14 |
before 1.0.1-1 | 1.0.1-1 |
vlcDebian:5.0 |
before 0.8.6.h-4+lenny2.3, plus listed versions 0.8.6.h-4+lenny2 |
0.8.6.h-4+lenny2.3 |
mplayerDebian:5.0 |
before 1.0~rc2-17+lenny3.2, plus listed versions 1.0~rc2-17+lenny3 |
1.0~rc2-17+lenny3.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2062 is a high vulnerability (CVSS 7.5) in Videolan Vlc Media Player, published May 11, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.48%, the 91st percentile. Fixed in mplayer 2:1.0~rc3+svn20100502-3.
References
seclists.org/fulldisclosure/2009/Jul/418
dzcore.wordpress.com/2009/07/27/dzc-2009-001-the-movie-player-and-vlc-media-player-real-data-transport-parsing-integer-underflow
git.videolan.org?p=vlc.git%3Ba=commit%3Bh=dc74600c97eb834c08674676e209afa842053aca
openwall.com/lists/oss-security/2010/06/04/4
nvd.nist.gov/vuln/detail/CVE-2010-2062
github.com/advisories/GHSA-pp8c-mm4f-pg89
security-tracker.debian.org/tracker/CVE-2010-2062