CVE-2010-3747

🗓️ 18 Oct 2010 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 154 Views🌐 WEB

ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, remote code execution or denial of service

Reporter	Title	Published	Views	Family All 21
0day.today	RealNetworks RealPlayer CDDA URI Initialization Vulnerability	18 Mar 201100:00	–	zdt
Tenable Nessus	Real Networks RealPlayer SP < 1.1.5 Multiple Vulnerabilities	27 Aug 201000:00	–	nessus
Tenable Nessus	RealPlayer for Windows < Build 12.0.0.879 Multiple Vulnerabilities	27 Aug 201000:00	–	nessus
Tenable Nessus	RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities	19 Oct 201000:00	–	nessus
Circl	CVE-2010-3747	17 Mar 201100:00	–	circl
Check Point Advisories	RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution (CVE-2010-3747)	28 Oct 201000:00	–	checkpoint_advisories
Check Point Advisories	RealPlayer CDDA URI Code Execution - Ver2 (CVE-2010-3747)	28 Jan 201400:00	–	checkpoint_advisories
Cvelist	CVE-2010-3747	18 Oct 201022:00	–	cvelist
d2	DSquare Exploit Pack: D2SEC_CDDAURI	19 Oct 201000:00	–	d2
Exploit DB	RealNetworks RealPlayer - CDDA URI Initialization (Metasploit)	17 Mar 201100:00	–	exploitdb

NVD

Node

realnetworks realplayerMatch11.0

realnetworks realplayerMatch11.0.1

realnetworks realplayerMatch11.0.2

realnetworks realplayerMatch11.0.3

realnetworks realplayerMatch11.0.4

realnetworks realplayerMatch11.0.5

realnetworks realplayerMatch11.1

Node

realnetworks realplayer_spMatch1.0.0

realnetworks realplayer_spMatch1.0.1

realnetworks realplayer_spMatch1.0.2

realnetworks realplayer_spMatch1.0.5

realnetworks realplayer_spMatch1.1

realnetworks realplayer_spMatch1.1.1

realnetworks realplayer_spMatch1.1.2

realnetworks realplayer_spMatch1.1.3

realnetworks realplayer_spMatch1.1.4

Node

realnetworks realplayerMatch2.1.2enterprise

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-10-210/
securityfocus	www.securityfocus.com/bid/44144
securityreason	www.securityreason.com/securityalert/8147
service	www.service.real.com/realplayer/security/10152010_player/en/

Parameter	Position	Path	Description	CWE
src	path	cdda://<retslide>	Exploit uses a crafted cdda:// URI to trigger uninitialized memory and potential code execution via RealPlayer when parsing the CDDA URI.	CWE-119

16 Jun 2026 23:23Current

7.7High risk

Vulners AI Score7.7

CVSS 29.3

EPSS0.35352

CWE-119