CVEvulnerability
CVE-2009-4243
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses HTTP chunked transfer coding, related to an "overflow."
Affected configurations
• realnetworks realplayer 10.0
• realnetworks realplayer 10.5
• realnetworks realplayer 11.0
• realnetworks realplayer 11.0.1
• realnetworks realplayer 11.0.2
• realnetworks realplayer 11.0.3
• realnetworks realplayer 11.0.4
• realnetworks realplayer 11.0.5
• realnetworks realplayer enterprise
• realnetworks realplayer sp 1.0.0
• realnetworks realplayer sp 1.0.1
• realnetworks realplayer 10.1
• realnetworks helix player 10.0
• realnetworks helix player 11.0.0
• realnetworks helix player 11.0.1
• realnetworks realplayer 11.0.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/61967 osvdb.org
- http://secunia.com/advisories/38218 Vendor Advisory
- http://securitytracker.com/id?1023489 Patch
- http://service.real.com/realplayer/security/01192010_player/en/ Patch, Vendor Advisory
- http://www.securityfocus.com/bid/37880 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0178 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55796 exchange.xforce.ibmcloud.com
- http://osvdb.org/61967 osvdb.org
- http://secunia.com/advisories/38218 Vendor Advisory
- http://securitytracker.com/id?1023489 Patch
- http://service.real.com/realplayer/security/01192010_player/en/ Patch, Vendor Advisory
- http://www.securityfocus.com/bid/37880 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0178 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55796 exchange.xforce.ibmcloud.com