CVE-2010-4377

2010-12-1416:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-4377

realnetworks

realplayer

buffer overflow

remote code execution

cook audio codec

nvd

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.207 Low

EPSS

Percentile

96.4%

JSON

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq11.0
realnetworks:realplayerrealnetworks realplayereq11.0.4
realnetworks:realplayerrealnetworks realplayereq11.0.2
realnetworks:realplayerrealnetworks realplayereq11.0.3
realnetworks:realplayerrealnetworks realplayereq11.0.5
realnetworks:realplayerrealnetworks realplayereq11.1
realnetworks:realplayerrealnetworks realplayereq11.0.1
realnetworks:realplayer_sprealnetworks realplayer speq1.0.1
realnetworks:realplayer_sprealnetworks realplayer speq1.1.5
realnetworks:realplayer_sprealnetworks realplayer speq1.1.3

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	11.0
realnetworks:realplayer	realnetworks realplayer	eq	11.0.4
realnetworks:realplayer	realnetworks realplayer	eq	11.0.2
realnetworks:realplayer	realnetworks realplayer	eq	11.0.3
realnetworks:realplayer	realnetworks realplayer	eq	11.0.5
realnetworks:realplayer	realnetworks realplayer	eq	11.1
realnetworks:realplayer	realnetworks realplayer	eq	11.0.1
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.0.1
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.1.5
realnetworks:realplayer_sp	realnetworks realplayer sp	eq	1.1.3