CVEvulnerability
CVE-2010-4387
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.
Affected configurations
• realnetworks realplayer 11.0
• realnetworks realplayer 11.0.1
• realnetworks realplayer 11.0.2
• realnetworks realplayer 11.0.3
• realnetworks realplayer 11.0.4
• realnetworks realplayer 11.0.5
• realnetworks realplayer 11.1
• realnetworks realplayer sp 1.0.0
• realnetworks realplayer sp 1.0.1
• realnetworks realplayer sp 1.0.2
• realnetworks realplayer sp 1.0.5
• realnetworks realplayer sp 1.1
• realnetworks realplayer sp 1.1.1
• realnetworks realplayer sp 1.1.2
• realnetworks realplayer sp 1.1.3
• realnetworks realplayer sp 1.1.4
• realnetworks realplayer 12.0.0.1444
• realnetworks realplayer 11.0.2.1744
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=884 labs.idefense.com
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.securitytracker.com/id?1024861 www.securitytracker.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=884 labs.idefense.com
- http://service.real.com/realplayer/security/12102010_player/en/ Vendor Advisory
- http://www.securitytracker.com/id?1024861 www.securitytracker.com