Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-3747
HistoryOct 19, 2010 - 12:00 a.m.

CVE-2010-3747

2010-10-1900:00:01
CWE-119
[email protected]
web.nvd.nist.gov
118
realnetworks
realplayer
activex control
remote code execution
denial of service
cve-2010-3747
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.953 High

EPSS

Percentile

99.4%

JSON

An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and application crash) via a long URI.

Affected configurations

NVD
Node
realnetworksrealplayerMatch11.0
OR
realnetworksrealplayerMatch11.0.1
OR
realnetworksrealplayerMatch11.0.2
OR
realnetworksrealplayerMatch11.0.3
OR
realnetworksrealplayerMatch11.0.4
OR
realnetworksrealplayerMatch11.0.5
OR
realnetworksrealplayerMatch11.1
Node
realnetworksrealplayer_spMatch1.0.0
OR
realnetworksrealplayer_spMatch1.0.1
OR
realnetworksrealplayer_spMatch1.0.2
OR
realnetworksrealplayer_spMatch1.0.5
OR
realnetworksrealplayer_spMatch1.1
OR
realnetworksrealplayer_spMatch1.1.1
OR
realnetworksrealplayer_spMatch1.1.2
OR
realnetworksrealplayer_spMatch1.1.3
OR
realnetworksrealplayer_spMatch1.1.4
Node
realnetworksrealplayerMatch2.1.2enterprise

Related

saint 4
prion 1
nvd 1
checkpoint_advisories 2
packetstorm 1
zdi 1
d2 1
cvelist 1
nessus 3
openvas 2
saint
saint
RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution
2010-10-22 00:00:00
RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution
2010-10-22 00:00:00
RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution
2010-10-22 00:00:00
prion
prion
Null pointer dereference
2010-10-19 00:00:00
nvd
nvd
CVE-2010-3747
2010-10-19 00:00:01
checkpoint_advisories
checkpoint_advisories
RealPlayer CDDA URI Code Execution - Ver2 (CVE-2010-3747)
2014-01-28 00:00:00
RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution (CVE-2010-3747)
2010-10-28 00:00:00
packetstorm
packetstorm
RealNetworks RealPlayer CDDA URI Initialization Vulnerability
2011-03-18 00:00:00
zdi
zdi
RealNetworks RealPlayer ActiveX Control CDDA URI Uninitialized Pointer Remote Code Execution Vulnerability
2010-10-15 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_CDDAURI
2010-10-19 00:00:00
cvelist
cvelist
CVE-2010-3747
2010-10-18 22:00:00
nessus
nessus
RealPlayer Enterprise for Windows < Build 6.0.12.1823 Multiple Vulnerabilities
2010-10-19 00:00:00
Real Networks RealPlayer SP < 1.1.5 Multiple Vulnerabilities
2010-08-27 00:00:00
RealPlayer for Windows < Build 12.0.0.879 Multiple Vulnerabilities
2010-08-27 00:00:00
openvas
openvas
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10
2010-12-29 00:00:00
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows
2010-12-29 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.953 High

EPSS

Percentile

99.4%

JSON
Related for CVE-2010-3747
saint4prion1nvd1checkpoint_advisories2packetstorm1zdi1d21cvelist1nessus3openvas2