CVEvulnerability
CVE-2010-4381
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.
Affected configurations
• realnetworks realplayer 11.0
• realnetworks realplayer 11.0.1
• realnetworks realplayer 11.0.2
• realnetworks realplayer 11.0.3
• realnetworks realplayer 11.0.4
• realnetworks realplayer 11.0.5
• realnetworks realplayer 11.1
• realnetworks realplayer sp 1.0.0
• realnetworks realplayer sp 1.0.1
• realnetworks realplayer sp 1.0.2
• realnetworks realplayer sp 1.0.5
• realnetworks realplayer sp 1.1
• realnetworks realplayer sp 1.1.1
• realnetworks realplayer sp 1.1.2
• realnetworks realplayer sp 1.1.3
• realnetworks realplayer sp 1.1.4
• realnetworks realplayer 12.0.0.1444
• realnetworks realplayer 2.1.2
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.securitytracker.com/id?1024861 www.securitytracker.com
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.securitytracker.com/id?1024861 www.securitytracker.com