[email protected]CVE-2010-2579

HistoryDec 14, 2010 - 4:00 p.m.

CVE-2010-2579

2010-12-1416:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2010-2579

realnetworks

realplayer

codec

memory access

vulnerability

nvd

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

57.9%

JSON

The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 does not properly initialize the number of channels, which allows attackers to obtain unspecified “memory access” via unknown vectors.

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq11.0.4
realnetworks:realplayerrealnetworks realplayereq11.0.2
realnetworks:realplayerrealnetworks realplayereq11.0.3
realnetworks:realplayerrealnetworks realplayereq11.0.5
realnetworks:realplayerrealnetworks realplayereq11.1
realnetworks:realplayerrealnetworks realplayereq11.0.1
realnetworks:realplayer_sprealnetworks realplayer speq1.0.1
realnetworks:realplayer_sprealnetworks realplayer speq1.1.3
realnetworks:realplayer_sprealnetworks realplayer speq1.0.0

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	11.0.4
realnetworks:realplayer	realnetworks realplayer	eq	11.0.2
realnetworks:realplayer	realnetworks realplayer	eq	11.0.3
realnetworks:realplayer	realnetworks realplayer	eq	11.0.5
realnetworks:realplayer	realnetworks realplayer	eq	11.1
realnetworks:realplayer	realnetworks realplayer	eq	11.0.1
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.0.1
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.1.3
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.0.0

Rows per page:

1-10 of 171

References

service.real.com/realplayer/security/12102010_player/en/

www.securitytracker.com/id?1024861

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

57.9%

JSON

Related for CVE-2010-2579

prion1 securityvulns1 openvas4 nessus2