CVE-2010-2062: Videolan Vlc Media Player

High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days.

Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header.

Affected products

• Videolan Vlc Media Player: up to and including 1.0.0; version 0.5.0 only; version 0.5.1 only; version 0.5.2 only; version 0.5.3 only; version 0.6.0 only; …

Published 2014-12-26. Last modified 2026-06-16.