CVE-2010-2996
7.4 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.523 Medium
EPSS
Percentile
97.6%
Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| realnetworks:realplayer | realnetworks realplayer | eq | 11.0 |
| realnetworks:realplayer | realnetworks realplayer | eq | 11.1 |
References
secunia.com/advisories/41154
service.real.com/realplayer/security/08262010_player/en/
www.securityfocus.com/archive/1/513381/100/0/threaded
www.securitytracker.com/id?1024370
www.vupen.com/english/advisories/2010/2216
www.zerodayinitiative.com/advisories/ZDI-10-166
exchange.xforce.ibmcloud.com/vulnerabilities/61425
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6703
Related
7.4 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.523 Medium
EPSS
Percentile
97.6%