CVE-2010-3747

🗓️ 18 Oct 2010 22:00:00Reported by mitreType

ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, remote code execution or denial of service

Reporter	Title	Published	Views	Family All 21
0day.today	RealNetworks RealPlayer CDDA URI Initialization Vulnerability	18 Mar 201100:00	–	zdt
Tenable Nessus	Real Networks RealPlayer SP < 1.1.5 Multiple Vulnerabilities	27 Aug 201000:00	–	nessus
Tenable Nessus	RealPlayer for Windows < Build 12.0.0.879 Multiple Vulnerabilities	27 Aug 201000:00	–	nessus
Tenable Nessus	RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities	19 Oct 201000:00	–	nessus
Circl	CVE-2010-3747	17 Mar 201100:00	–	circl
Check Point Advisories	RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution (CVE-2010-3747)	28 Oct 201000:00	–	checkpoint_advisories
Check Point Advisories	RealPlayer CDDA URI Code Execution - Ver2 (CVE-2010-3747)	28 Jan 201400:00	–	checkpoint_advisories
Cvelist	CVE-2010-3747	18 Oct 201022:00	–	cvelist
d2	DSquare Exploit Pack: D2SEC_CDDAURI	19 Oct 201000:00	–	d2
Exploit DB	RealNetworks RealPlayer - CDDA URI Initialization (Metasploit)	17 Mar 201100:00	–	exploitdb

NVD

Node

realnetworks realplayerMatch11.0

realnetworks realplayerMatch11.0.1

realnetworks realplayerMatch11.0.2

realnetworks realplayerMatch11.0.3

realnetworks realplayerMatch11.0.4

realnetworks realplayerMatch11.0.5

realnetworks realplayerMatch11.1

Node

realnetworks realplayer_spMatch1.0.0

realnetworks realplayer_spMatch1.0.1

realnetworks realplayer_spMatch1.0.2

realnetworks realplayer_spMatch1.0.5

realnetworks realplayer_spMatch1.1

realnetworks realplayer_spMatch1.1.1

realnetworks realplayer_spMatch1.1.2

realnetworks realplayer_spMatch1.1.3

realnetworks realplayer_spMatch1.1.4

Node

realnetworks realplayerMatch2.1.2enterprise

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-10-210/
securityfocus	www.securityfocus.com/bid/44144
securityreason	www.securityreason.com/securityalert/8147
service	www.service.real.com/realplayer/security/10152010_player/en/

29 Apr 2026 01:13Current

7.7High risk

Vulners AI Score7.7

CVSS 29.3

EPSS0.66534

CWE-119