Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vlc_media_player | Videolan | 0.9.0 (including) | 0.9.0 (including) |
| Vlc_media_player | Videolan | 0.9.1 (including) | 0.9.1 (including) |
| Vlc_media_player | Videolan | 0.9.2 (including) | 0.9.2 (including) |
| Vlc_media_player | Videolan | 0.9.3 (including) | 0.9.3 (including) |
| Vlc_media_player | Videolan | 0.9.4 (including) | 0.9.4 (including) |
| Vlc_media_player | Videolan | 0.9.5 (including) | 0.9.5 (including) |
| Vlc_media_player | Videolan | 0.9.6 (including) | 0.9.6 (including) |
| Vlc_media_player | Videolan | 0.9.7 (including) | 0.9.7 (including) |
| Vlc_media_player | Videolan | 0.9.8 (including) | 0.9.8 (including) |
| Vlc | Ubuntu | intrepid | * |
| Vlc | Ubuntu | upstream | * |