CVEvulnerability

CVE-2009-4246

9.3 HIGH Published 2010-01-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-01-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows user-assisted remote attackers to execute arbitrary code via a malformed .RJS skin file that contains a web.xmb file with crafted length values.

Affected configurations

• realnetworks realplayer 10.0 • realnetworks realplayer 10.5 • realnetworks realplayer 11.0 • realnetworks realplayer 11.0.1 • realnetworks realplayer 11.0.2 • realnetworks realplayer 11.0.3 • realnetworks realplayer 11.0.4 • realnetworks realplayer 11.0.5 • realnetworks realplayer enterprise • realnetworks realplayer sp 1.0.0 • realnetworks realplayer sp 1.0.1 • realnetworks realplayer 10.1 • realnetworks helix player 10.0 • realnetworks helix player 11.0.0 • realnetworks helix player 11.0.1 • realnetworks realplayer 11.0.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References