CVEvulnerability
CVE-2010-4385
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via crafted frame dimensions in an SIPR stream.
Affected configurations
• realnetworks realplayer 11.0
• realnetworks realplayer 11.0.1
• realnetworks realplayer 11.0.2
• realnetworks realplayer 11.0.3
• realnetworks realplayer 11.0.4
• realnetworks realplayer 11.0.5
• realnetworks realplayer 11.1
• realnetworks realplayer sp 1.0.0
• realnetworks realplayer sp 1.0.1
• realnetworks realplayer sp 1.0.2
• realnetworks realplayer sp 1.0.5
• realnetworks realplayer sp 1.1
• realnetworks realplayer sp 1.1.1
• realnetworks realplayer sp 1.1.2
• realnetworks realplayer sp 1.1.3
• realnetworks realplayer sp 1.1.4
• realnetworks realplayer 11.0.2.1744
• realnetworks realplayer 2.1.2
Related
Weakness · not in database (1)
References
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0981.html www.redhat.com
- http://www.securitytracker.com/id?1024861 www.securitytracker.com
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0981.html www.redhat.com
- http://www.securitytracker.com/id?1024861 www.securitytracker.com