CVEvulnerability
CVE-2010-4386
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.
Affected configurations
• realnetworks realplayer 11.0
• realnetworks realplayer 11.0.1
• realnetworks realplayer 11.0.2
• realnetworks realplayer 11.0.3
• realnetworks realplayer 11.0.4
• realnetworks realplayer 11.0.5
• realnetworks realplayer 11.1
• realnetworks realplayer sp 1.0.0
• realnetworks realplayer sp 1.0.1
• realnetworks realplayer sp 1.0.2
• realnetworks realplayer sp 1.0.5
• realnetworks realplayer sp 1.1
• realnetworks realplayer sp 1.1.1
• realnetworks realplayer sp 1.1.2
• realnetworks realplayer sp 1.1.3
• realnetworks realplayer sp 1.1.4
• realnetworks realplayer 11.0.2.1744
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=883 labs.idefense.com
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0981.html www.redhat.com
- http://www.securitytracker.com/id?1024861 www.securitytracker.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=883 labs.idefense.com
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0981.html www.redhat.com
- http://www.securitytracker.com/id?1024861 www.securitytracker.com